From decd3395dbed9a73f314a23a19329c2a17f45be2 Mon Sep 17 00:00:00 2001
From: zhangshaohu <shaohu.zhang@fit2cloud.com>
Date: Thu, 22 May 2025 21:59:06 +0800
Subject: [PATCH] build: Sensitive directory permissions

---
 installer/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/installer/Dockerfile b/installer/Dockerfile
index 31c254bf1..796e8535e 100644
--- a/installer/Dockerfile
+++ b/installer/Dockerfile
@@ -71,7 +71,7 @@ RUN chmod 755 /opt/maxkb/app/installer/run-maxkb.sh && \
     chown -R sandbox:root /opt/maxkb/app/sandbox && \
     chmod g-x /usr/local/bin/* /usr/bin/* /bin/* /usr/sbin/* /sbin/* /usr/lib/postgresql/15/bin/* && \
     chmod g+x /usr/local/bin/python* && \
-    chmod g-rx /etc
+    find /etc/ -type f ! -path '/etc/resolv.conf' ! -path '/etc/hosts' | xargs chmod g-rx
 
 EXPOSE 8080