From cef903b77e1bfdcfc6222cf91b14443813604cfc Mon Sep 17 00:00:00 2001 From: codex-bot-andresmgsl Date: Fri, 4 Sep 2026 06:28:29 +0000 Subject: [PATCH] fix: normalize Debian payload modes --- scripts/build-deb.sh | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/scripts/build-deb.sh b/scripts/build-deb.sh index 9d60d6f..9af165b 100755 --- a/scripts/build-deb.sh +++ b/scripts/build-deb.sh @@ -67,9 +67,9 @@ EOF # Native package (no Debian revision in the version), so plain changelog.gz. gzip -9n -c "$STAGE/changelog" > "$DOC/changelog.gz" -# Normalize permissions regardless of the builder's umask: no group/other -# write anywhere, executable entry point. -chmod -R go-w "$PKG/usr" +# Normalize permissions regardless of the builder's umask: traversable +# directories, readable files, and execute bits retained only where intended. +chmod -R u+rwX,go=rX "$PKG/usr" chmod 0755 "$LIB/src/cli.js" # --- control -----------------------------------------------------------------