internal/exec/util/file: Set ownership first, then mode

From https://man7.org/linux/man-pages/man2/lchown.2.html:

> When the owner or group of an executable file is changed by an
> unprivileged user, the S_ISUID and S_ISGID mode bits are cleared.
> POSIX does not specify whether this also should happen when root
> does the chown(); the Linux behavior depends on the kernel version,
> and since Linux 2.2.13, root is treated like other users.

Fixes: #2042

Author: prestist

internal/exec/util/file.go

@@ -151,20 +151,28 @@ func (u Util) WriteLink(s types.Link) error {
 }
 
 func (u Util) SetPermissions(mode *int, node types.Node) error {
-	if mode != nil {
-		if err := os.Chmod(node.Path, ToFileMode(*mode)); err != nil {
-			return fmt.Errorf("failed to change mode of %s: %v", node.Path, err)
-		}
-	}
-
+	// Set ownership and then permissions.
+	// From https://man7.org/linux/man-pages/man2/lchown.2.html:
+	// "When the owner or group of an executable file is changed by an
+	// unprivileged user, the S_ISUID and S_ISGID mode bits are cleared. POSIX
+	// does not specify whether this also should happen when root does the
+	// chown(); the Linux behavior depends on the kernel version, and since
+	// Linux 2.2.13, root is treated like other users."
 	defaultUid, defaultGid, _ := getFileOwnerAndMode(node.Path)
 	uid, gid, err := u.ResolveNodeUidAndGid(node, defaultUid, defaultGid)
 	if err != nil {
 		return fmt.Errorf("failed to determine correct uid and gid for %s: %v", node.Path, err)
 	}
+
 	if err := os.Lchown(node.Path, uid, gid); err != nil {
 		return fmt.Errorf("failed to change ownership of %s: %v", node.Path, err)
 	}
+
+	if mode != nil {
+		if err := os.Chmod(node.Path, ToFileMode(*mode)); err != nil {
+			return fmt.Errorf("failed to change mode of %s: %v", node.Path, err)
+		}
+	}
 	return nil
 }