Friday, June 20, 2025
1 change · saas-18.1
Security fixes and vulnerability patches
This fix prevents device setup aliases from changing home folder permissions in a way that could block secure key-based SSH access. It helps preserve the expected security settings while still allowing maintenance commands to run with the correct permissions.
Original PR description
A random change of permissions from 755 to 775 of `/home/pi` was blocking ssh connection with key, as well as compromising the safety of the directory. We updated aliases to run commands directly with the right user, to ensure no ownership or permission change occurs. We also updated the `devtools` alias to run `sed` commands as sudo, for it to be able to write its temporary files in the current directory.