prevents privilege escalation

Vanilla-OS · Jul 31, 2024 · 1f835d3 · 1f835d3
1 parent 0b6640f
commit 1f835d3
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/vanilla_first_setup/utils/processor.py b/vanilla_first_setup/utils/processor.py
@@ -129,6 +129,9 @@ def get_setup_commands(log_path, pre_run, post_run, commands):
 
                 f.write(f"{command}\n")
 
+            # prevent privilege escalation
+            f.write(f"chown root:root {commands_script_path}\n")
+
             # run the outRun commands
             if out_run:
                 f.write("if [ $? -eq 0 ]; then")