From 446654a4fbe5a427896217e44515a511676a1c59 Mon Sep 17 00:00:00 2001 From: dr-frmr Date: Mon, 11 Nov 2024 15:25:00 -0500 Subject: [PATCH] security: deescalate perm given in build-release.py --- scripts/build-release.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/build-release.py b/scripts/build-release.py index bd36ac1e..f9d09c0a 100755 --- a/scripts/build-release.py +++ b/scripts/build-release.py @@ -60,7 +60,7 @@ def build_and_move(feature, tmp_dir, architecture, os_name): source_path = f"target/release/{binary_name}" dest_path = os.path.join(tmp_dir, binary_name) shutil.move(source_path, dest_path) - os.chmod(dest_path, 0o775) + os.chmod(dest_path, 0o644) # Create a zip archive of the binary zip_path = os.path.join(tmp_dir, zip_name)