Skip to content

Commit 7330f1b

Browse files
refactor: allow sandbox to exec python.
1 parent bd7cc6e commit 7330f1b

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

installer/Dockerfile-base

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ RUN ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime && \
2828
mkdir -p /opt/maxkb-app/sandbox/lib && chmod -R 550 /opt/maxkb-app/sandbox && \
2929
useradd --no-create-home --home /opt/maxkb-app/sandbox -s /usr/sbin/nologin sandbox -g root && \
3030
chmod g-rwx /usr/local/bin/* /usr/bin/* /bin/* /usr/sbin/* /sbin/* /usr/lib/postgresql/17/bin/* && \
31-
chmod g+xr /usr/bin/ld.so /usr/local/bin/python* && \
31+
chmod g+xr /usr/bin/ld.so /usr/local/bin/python* `which env` && \
3232
chmod -R g-rwx /tmp /var/tmp /var/lock && \
3333
apt-get clean all && \
3434
rm -rf /var/lib/postgresql /var/lib/apt/lists/* /usr/share/doc/* /usr/share/man/* /usr/share/info/* /usr/share/locale/* /usr/share/lintian/* /usr/share/linda/* /var/cache/* /var/log/* /var/tmp/* /tmp/*

0 commit comments

Comments
 (0)