From 174bbe46aee1fc0ec380c9deb2b176cebb92a6d0 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Tue, 16 Jun 2026 16:54:51 +0000
Subject: [PATCH] Fix permission denied on Electron zip: chmod 644 before
 kiosk-user unzip

mktemp creates the tmp zip owned by root with mode 600.
sudo -u kiosk unzip then fails with "Permission denied".
Add chmod 644 immediately after download so the kiosk user can read it.

https://claude.ai/code/session_01EyjEQLWbTXcZgbMDarf7NU
---
 ubuntu-based-kiosk-v1.0.3.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ubuntu-based-kiosk-v1.0.3.sh b/ubuntu-based-kiosk-v1.0.3.sh
index 3e4d56c..a825489 100644
--- a/ubuntu-based-kiosk-v1.0.3.sh
+++ b/ubuntu-based-kiosk-v1.0.3.sh
@@ -11099,6 +11099,7 @@ install_electron_binary() {
             tmp_zip=$(mktemp --suffix=.zip)
             if wget --timeout=300 --tries=3 --show-progress -O "$tmp_zip" "$electron_url" 2>&1; then
                 command -v unzip >/dev/null 2>&1 || sudo apt install -y unzip
+                chmod 644 "$tmp_zip"   # mktemp creates root:root 600; kiosk user needs read access
                 sudo -u "$KIOSK_USER" mkdir -p "$KIOSK_DIR/node_modules/electron/dist"
                 sudo -u "$KIOSK_USER" unzip -o "$tmp_zip" -d "$KIOSK_DIR/node_modules/electron/dist/"
                 sudo -u "$KIOSK_USER" chmod +x "$electron_bin"