Ood-portal-generator permissions being too open

Get Help
1

Hi all,

I found that Open OnDemand’s ood-portal-generator (/opt/ood/ood-portal-generator/sbin/update_ood_portal) has wide permissions. This becomes a concern for OOD portal that’s running on login node(s), this permission is wide open because any random user can execute this executable and may create a problem. What’s the best practice to follow here? Would changing permission to 700 or something similar impact anything or should I go ahead and change the permission of this directory /opt/ood/ using chmod -R 700 /opt/ood?

root@login-node:/# ll /opt/ood/ood-portal-generator/sbin/
-rwxr-xr-x  1 root root  671 Aug 15  2025 update_ood_portal*

Thank you!

Best,
Arhat Kobawala
Stanford University

2

While the executable may be 755, the actual configuration files touched by it need advanced permissions so it requires sudo to do anything of impact. That said, you would be fine to reduce permissions on it without affecting regular users, though an admin may have to chmod it back the next time it is used.