diff --git a/Dockerfile.kde-nvidia-ver4a b/Dockerfile.kde-nvidia-ver4a index c18e9ad..9b4d64f 100644 --- a/Dockerfile.kde-nvidia-ver4a +++ b/Dockerfile.kde-nvidia-ver4a @@ -24,7 +24,7 @@ RUN dnf5 -y autoremove # Remove setuid/setgid binaries # Except for polkit-agent-helper-1, it's currently required for interactive authentication with polkit. -RUN find /usr -mindepth 1 -type f -perm /6000 -regextype posix-extended -not -regex '^/usr/lib/polkit-1/polkit-agent-helper-1$|^/usr/sbin/unix_chkpwd$|^/usr/bin/fusermount[0-9]?$' -exec sh -c "chmod ug-s '{}' && echo \"Removed setuid/setgid bit(s) from '{}'\"" \; +RUN find /usr -mindepth 1 -type f -perm /6000 -regextype posix-extended -not -regex '^/usr/lib/polkit-1/polkit-agent-helper-1$|^/usr/s?bin/unix_chkpwd$|^/usr/s?bin/fusermount[0-9]?$' -exec sh -c "chmod ug-s '{}' && echo \"Removed setuid/setgid bit(s) from '{}'\"" \; # https://github.com/ostreedev/ostree-rs-ext/issues/159 RUN ostree container commit diff --git a/Dockerfile.kde-ver4a b/Dockerfile.kde-ver4a index 8e7ec7a..a9abf0c 100644 --- a/Dockerfile.kde-ver4a +++ b/Dockerfile.kde-ver4a @@ -24,7 +24,7 @@ RUN dnf5 -y autoremove # Remove setuid/setgid binaries # Except for polkit-agent-helper-1, it's currently required for interactive authentication with polkit. -RUN find /usr -mindepth 1 -type f -perm /6000 -regextype posix-extended -not -regex '^/usr/lib/polkit-1/polkit-agent-helper-1$|^/usr/sbin/unix_chkpwd$|^/usr/bin/fusermount[0-9]?$' -exec sh -c "chmod ug-s '{}' && echo \"Removed setuid/setgid bit(s) from '{}'\"" \; +RUN find /usr -mindepth 1 -type f -perm /6000 -regextype posix-extended -not -regex '^/usr/lib/polkit-1/polkit-agent-helper-1$|^/usr/s?bin/unix_chkpwd$|^/usr/s?bin/fusermount[0-9]?$' -exec sh -c "chmod ug-s '{}' && echo \"Removed setuid/setgid bit(s) from '{}'\"" \; # https://github.com/ostreedev/ostree-rs-ext/issues/159 RUN ostree container commit