From ce52ee3ca7838dfd91371e7f3e165cab8b6f182a Mon Sep 17 00:00:00 2001
From: liqiang-fit2cloud <liqiang@fit2cloud.com>
Date: Fri, 8 Aug 2025 18:02:10 +0800
Subject: [PATCH] refactor: change dir permission.

---
 .dockerignore                        | 3 ++-
 .github/workflows/build-and-push.yml | 2 +-
 apps/maxkb/settings/lib.py           | 2 +-
 apps/ops/celery/utils.py             | 4 ++--
 apps/tools/serializers/tool.py       | 2 +-
 5 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/.dockerignore b/.dockerignore
index d8fd00762..a6d4542ee 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -1,2 +1,3 @@
 .git*
-.idea*
\ No newline at end of file
+.idea*
+*.md
\ No newline at end of file
diff --git a/.github/workflows/build-and-push.yml b/.github/workflows/build-and-push.yml
index 0f3b9bca4..ed78a5733 100644
--- a/.github/workflows/build-and-push.yml
+++ b/.github/workflows/build-and-push.yml
@@ -7,7 +7,7 @@ on:
     inputs:
       dockerImageTag:
         description: 'Image Tag'
-        default: 'v2.0.1-dev'
+        default: 'v2.0.3-dev'
         required: true
       dockerImageTagWithLatest:
         description: '是否发布latest tag（正式发版时选择，测试版本切勿选择）'
diff --git a/apps/maxkb/settings/lib.py b/apps/maxkb/settings/lib.py
index 135ea3954..2927da5c3 100644
--- a/apps/maxkb/settings/lib.py
+++ b/apps/maxkb/settings/lib.py
@@ -15,7 +15,7 @@ from maxkb.const import CONFIG, PROJECT_DIR, LOG_DIR
 # celery相关配置
 celery_data_dir = os.path.join(PROJECT_DIR, 'data', 'celery_task')
 if not os.path.exists(celery_data_dir) or not os.path.isdir(celery_data_dir):
-    os.makedirs(celery_data_dir)
+    os.makedirs(celery_data_dir, 0o700, exist_ok=True)
 # Celery using redis as broker
 redis_celery_once_db = CONFIG.get("REDIS_DB")
 redis_celery_db = CONFIG.get('REDIS_DB')
diff --git a/apps/ops/celery/utils.py b/apps/ops/celery/utils.py
index 7a833dfb1..d14f9e1f4 100644
--- a/apps/ops/celery/utils.py
+++ b/apps/ops/celery/utils.py
@@ -33,8 +33,8 @@ def get_celery_periodic_task(task_name):
     return task
 
 
-def make_dirs(name, mode=0o755, exist_ok=False):
-    """ 默认权限设置为 0o755 """
+def make_dirs(name, mode=0o700, exist_ok=False):
+    """ 默认权限设置为 0o700 """
     return os.makedirs(name, mode=mode, exist_ok=exist_ok)
 
 
diff --git a/apps/tools/serializers/tool.py b/apps/tools/serializers/tool.py
index 7cb9b71fd..5257d1a2b 100644
--- a/apps/tools/serializers/tool.py
+++ b/apps/tools/serializers/tool.py
@@ -62,7 +62,7 @@ def get_file_name():
     file_name = f"{uuid.uuid7()}"
     pylint_dir = os.path.join(PROJECT_DIR, 'data', 'pylint')
     if not os.path.exists(pylint_dir):
-        os.makedirs(pylint_dir)
+        os.makedirs(pylint_dir, 0o700, exist_ok=True)
     return os.path.join(pylint_dir, file_name)