CHIA-752 - set permissions in postinst.sh for chrome-sandbox (#18164)

* CHIA-752 - set permissions in postinst.sh for chrome-sandbox

* Add check for permissions of chrome-sandbox

* one-liner permissions check

* prettier fix

* Update build-linux-installer-deb.yml

.github/workflows/build-linux-installer-deb.yml

@@ -433,6 +433,12 @@ jobs:
             false
           fi
 
+      - name: Check permissions of /opt/chia/chrome-sandbox
+        shell: bash
+        if: matrix.mode.name == 'GUI'
+        run: |
+          [ $(stat -c %a:%G:%U /opt/chia/chrome-sandbox) == "4755:root:root" ]
+
       - name: Remove package
         run: |
           apt-get remove --yes ${{ matrix.mode.package }}

build_scripts/assets/deb/postinst.sh

@@ -3,5 +3,7 @@
 
 set -e
 
+chown -f root:root /opt/chia/chrome-sandbox || true
+chmod -f 4755 /opt/chia/chrome-sandbox || true
 ln -s /opt/chia/resources/app.asar.unpacked/daemon/chia /usr/bin/chia || true
 ln -s /opt/chia/chia-blockchain /usr/bin/chia-blockchain || true