From ecd4d63aee545f958b2a6cdd9fc285878217488c Mon Sep 17 00:00:00 2001 From: liqiang-fit2cloud Date: Mon, 21 Jul 2025 11:03:20 +0800 Subject: [PATCH] refactor: remove r permission for sandbox user. --- installer/Dockerfile-base | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/installer/Dockerfile-base b/installer/Dockerfile-base index fc46ef3dc..bf8377a65 100644 --- a/installer/Dockerfile-base +++ b/installer/Dockerfile-base @@ -27,7 +27,7 @@ RUN ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && \ mkdir -p /opt/maxkb-app/sandbox && \ useradd --no-create-home --home /opt/maxkb-app/sandbox sandbox -g root && \ chown -R sandbox:root /opt/maxkb-app/sandbox && \ - chmod g-x /usr/local/bin/* /usr/bin/* /bin/* /usr/sbin/* /sbin/* /usr/lib/postgresql/17/bin/* && \ + chmod g-xr /usr/local/bin/* /usr/bin/* /bin/* /usr/sbin/* /sbin/* /usr/lib/postgresql/17/bin/* && \ chmod g+x /usr/local/bin/python* && \ apt-get clean all && \ rm -rf /var/lib/apt/lists/* /usr/share/doc/* /usr/share/man/* /usr/share/info/* /usr/share/locale/* /usr/share/lintian/* /usr/share/linda/* /var/cache/* /var/log/* /var/tmp/* /tmp/*