build: Sensitive directory permissions

This commit is contained in:
zhangshaohu 2025-05-22 21:59:06 +08:00
parent 9d7a383348
commit decd3395db

View File

@ -71,7 +71,7 @@ RUN chmod 755 /opt/maxkb/app/installer/run-maxkb.sh && \
chown -R sandbox:root /opt/maxkb/app/sandbox && \
chmod g-x /usr/local/bin/* /usr/bin/* /bin/* /usr/sbin/* /sbin/* /usr/lib/postgresql/15/bin/* && \
chmod g+x /usr/local/bin/python* && \
chmod g-rx /etc
find /etc/ -type f ! -path '/etc/resolv.conf' ! -path '/etc/hosts' | xargs chmod g-rx
EXPOSE 8080