<![CDATA[setup start.sh installs /etc/sudoers.d/cloudron with mode 0644 without chmod — visudo -c warns "bad permissions"]]>

<![CDATA[setup start.sh installs /etc/sudoers.d/cloudron with mode 0644 without chmod — visudo -c warns "bad permissions"]]>Hi, on Ubuntu 24.04 with box 10.1.x,

visudo -c reports /etc/sudoers.d/cloudron

: bad permissions, should be mode 0440.

Cause: setup/start.sh copies the file with plain cp and no chmod, so it lands as 0644. Since start.sh runs at every update, a manual chmod 440 gets reverted each time.

Not a privilege escalation (sudo only refuses group/world-writable files), but it trips visudo -c, which hardening/security audits run routinely.

Suggestion: add chmod 0440 right after the cp in setup/start.sh (and mark the source file 0440 in the tarball).

]]>https://forum.cloudron.io/topic/16232/setup-start.sh-installs-etc-sudoers.d-cloudron-with-mode-0644-without-chmod-visudo-c-warns-bad-permissionsRSS for NodeThu, 05 Nov 2026 08:13:01 GMTSun, 01 Nov 2026 21:44:06 GMT60<![CDATA[Reply to setup start.sh installs /etc/sudoers.d/cloudron with mode 0644 without chmod — visudo -c warns "bad permissions" on Mon, 02 Nov 2026 11:45:44 GMT]]>Thanks for the report, this is fixed for next release with https://git.cloudron.io/platform/box/-/commit/480a96b6567650cae81c0fe14763ee9730a1e79d

]]>https://forum.cloudron.io/post/132277https://forum.cloudron.io/post/132277Mon, 02 Nov 2026 11:45:44 GMT