From 10368a71a479006a5819cb080fe3d958cbf5bf2c Mon Sep 17 00:00:00 2001
From: Guangming Lu <71873108+LuGuangming@users.noreply.github.com>
Date: Sat, 30 Dec 2023 23:39:16 +0800
Subject: [PATCH] [fix][security]security optimize for executable binary file
 doris_be access should be restricted (#29303)

---
 bin/start_be.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/start_be.sh b/bin/start_be.sh
index debf0eda7d..ebf52a05ff 100755
--- a/bin/start_be.sh
+++ b/bin/start_be.sh
@@ -231,7 +231,7 @@ if [[ -f "${pidfile}" ]]; then
     fi
 fi
 
-chmod 755 "${DORIS_HOME}/lib/doris_be"
+chmod 550 "${DORIS_HOME}/lib/doris_be"
 echo "start time: $(date)" >>"${LOG_DIR}/be.out"
 
 if [[ ! -f '/bin/limit3' ]]; then