-
Hi, on Ubuntu 24.04 with box 10.1.x,
visudo -c reports /etc/sudoers.d/cloudron: bad permissions, should be mode 0440.
Cause: setup/start.sh copies the file with plain cp and no chmod, so it lands as 0644. Since start.sh runs at every update, a manual chmod 440 gets reverted each time.
Not a privilege escalation (sudo only refuses group/world-writable files), but it trips visudo -c, which hardening/security audits run routinely.
Suggestion: add chmod 0440 right after the cp in setup/start.sh (and mark the source file 0440 in the tarball).
-
J james moved this topic from Community Packages
-
-
N nebulon marked this topic as a question
-
N nebulon has marked this topic as solved
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login