Remove setuid/setgid bits on store objects in post-processing

Updates #52
256lights · Oct 23, 2024 · 13ec201 · 13ec201
1 parent 125184d
commit 13ec201
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/osutil/osutil.go b/internal/osutil/osutil.go
@@ -105,7 +105,7 @@ func MakePublicReadOnly(path string, onError func(error) error) error {
 			existingMode = info.Mode() & permMask
 		}
 
-		newMode := (existingMode | 0o444) &^ 0o222 // +r-w
+		newMode := (existingMode | 0o444) &^ (0o222 | os.ModeSetuid | os.ModeSetgid) // +r-sw
 		if entry.IsDir() || existingMode&0o111 != 0 {
 			newMode |= 0o111 // +x
 		}