diff --git a/luci-app-auth-guardian/Makefile b/luci-app-auth-guardian/Makefile
index 1d3c612a..3b27c083 100644
--- a/luci-app-auth-guardian/Makefile
+++ b/luci-app-auth-guardian/Makefile
@@ -12,7 +12,12 @@ LUCI_DEPENDS:=+luci-base +rpcd +nodogsplash
 LUCI_PKGARCH:=all
 
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.auth-guardian:root:root:755
 
 include $(TOPDIR)/feeds/luci/luci.mk
diff --git a/luci-app-bandwidth-manager/Makefile b/luci-app-bandwidth-manager/Makefile
index 73ca9c9a..ec2183cf 100644
--- a/luci-app-bandwidth-manager/Makefile
+++ b/luci-app-bandwidth-manager/Makefile
@@ -12,7 +12,12 @@ LUCI_DEPENDS:=+luci-base +rpcd +tc +kmod-sched-core +kmod-sched-cake +kmod-ifb +
 LUCI_PKGARCH:=all
 
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.bandwidth-manager:root:root:755
 
 include $(TOPDIR)/feeds/luci/luci.mk
diff --git a/luci-app-cdn-cache/Makefile b/luci-app-cdn-cache/Makefile
index 4287bb50..13975367 100644
--- a/luci-app-cdn-cache/Makefile
+++ b/luci-app-cdn-cache/Makefile
@@ -12,7 +12,12 @@ LUCI_DEPENDS:=+luci-base +rpcd
 LUCI_PKGARCH:=all
 
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.cdn-cache:root:root:755
 
 include $(TOPDIR)/feeds/luci/luci.mk
diff --git a/luci-app-client-guardian/Makefile b/luci-app-client-guardian/Makefile
index b328146e..f9b9f982 100644
--- a/luci-app-client-guardian/Makefile
+++ b/luci-app-client-guardian/Makefile
@@ -21,7 +21,12 @@ LUCI_DEPENDS:=+luci-base +luci-app-secubox +luci-lib-jsonc +rpcd +rpcd-mod-luci
 LUCI_PKGARCH:=all
 
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.client-guardian:root:root:755
 
 include $(TOPDIR)/feeds/luci/luci.mk
diff --git a/luci-app-crowdsec-dashboard/Makefile b/luci-app-crowdsec-dashboard/Makefile
index ed81a151..f5df0f23 100644
--- a/luci-app-crowdsec-dashboard/Makefile
+++ b/luci-app-crowdsec-dashboard/Makefile
@@ -21,7 +21,12 @@ LUCI_DEPENDS:=+luci-base +luci-app-secubox +crowdsec +luci-lib-jsonc +rpcd +rpcd
 LUCI_PKGARCH:=all
 
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.crowdsec-dashboard:root:root:755
 
 include $(TOPDIR)/feeds/luci/luci.mk
diff --git a/luci-app-ksm-manager/Makefile b/luci-app-ksm-manager/Makefile
index 8259ff49..d1469731 100644
--- a/luci-app-ksm-manager/Makefile
+++ b/luci-app-ksm-manager/Makefile
@@ -17,7 +17,12 @@ PKG_MAINTAINER:=CyberMind <contact@cybermind.fr>
 PKG_LICENSE:=Apache-2.0
 
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.ksm-manager:root:root:755
 
 include $(TOPDIR)/feeds/luci/luci.mk
diff --git a/luci-app-media-flow/Makefile b/luci-app-media-flow/Makefile
index c07d0b3d..7df4a15d 100644
--- a/luci-app-media-flow/Makefile
+++ b/luci-app-media-flow/Makefile
@@ -15,7 +15,12 @@ LUCI_DEPENDS:=+luci-base +rpcd +netifyd +luci-app-netifyd-dashboard
 LUCI_PKGARCH:=all
 
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.media-flow:root:root:755
 
 include $(TOPDIR)/feeds/luci/luci.mk
diff --git a/luci-app-netdata-dashboard/Makefile b/luci-app-netdata-dashboard/Makefile
index b3e1ef0d..163bb69e 100644
--- a/luci-app-netdata-dashboard/Makefile
+++ b/luci-app-netdata-dashboard/Makefile
@@ -21,7 +21,12 @@ LUCI_DEPENDS:=+luci-base +luci-app-secubox +luci-lib-jsonc +rpcd +rpcd-mod-luci
 LUCI_PKGARCH:=all
 
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.netdata-dashboard:root:root:755
 
 include $(TOPDIR)/feeds/luci/luci.mk
diff --git a/luci-app-netifyd-dashboard/Makefile b/luci-app-netifyd-dashboard/Makefile
index 6e9bd302..9e2f587c 100644
--- a/luci-app-netifyd-dashboard/Makefile
+++ b/luci-app-netifyd-dashboard/Makefile
@@ -21,7 +21,12 @@ LUCI_DEPENDS:=+luci-base +luci-app-secubox +luci-lib-jsonc +rpcd +rpcd-mod-luci
 LUCI_PKGARCH:=all
 
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.netifyd-dashboard:root:root:755
 
 include $(TOPDIR)/feeds/luci/luci.mk
diff --git a/luci-app-network-modes/Makefile b/luci-app-network-modes/Makefile
index a3f4be6f..9a2d63dc 100644
--- a/luci-app-network-modes/Makefile
+++ b/luci-app-network-modes/Makefile
@@ -20,7 +20,12 @@ LUCI_DEPENDS:=+luci-base +luci-app-secubox +luci-lib-jsonc +rpcd +rpcd-mod-luci
 
 LUCI_PKGARCH:=all
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.network-modes:root:root:755
 
 include $(TOPDIR)/feeds/luci/luci.mk
diff --git a/luci-app-secubox/Makefile b/luci-app-secubox/Makefile
index a9d82699..a8892bb5 100644
--- a/luci-app-secubox/Makefile
+++ b/luci-app-secubox/Makefile
@@ -11,7 +11,12 @@ LUCI_DESCRIPTION:=Central control hub for all SecuBox modules. Provides unified
 LUCI_DEPENDS:=+luci-base +rpcd +curl +jq
 LUCI_PKGARCH:=all
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.secubox:root:root:755 \
 	/usr/libexec/secubox/fix-permissions.sh:root:root:755
 
diff --git a/luci-app-system-hub/Makefile b/luci-app-system-hub/Makefile
index 2b7a27cc..e7a3f976 100644
--- a/luci-app-system-hub/Makefile
+++ b/luci-app-system-hub/Makefile
@@ -11,7 +11,12 @@ LUCI_DESCRIPTION:=Central system control with monitoring, services, logs, and ba
 LUCI_DEPENDS:=+luci-base +rpcd +coreutils +coreutils-base64
 LUCI_PKGARCH:=all
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.system-hub:root:root:755
 
 include $(TOPDIR)/feeds/luci/luci.mk
diff --git a/luci-app-traffic-shaper/Makefile b/luci-app-traffic-shaper/Makefile
index 3e0de5a3..1755ba19 100644
--- a/luci-app-traffic-shaper/Makefile
+++ b/luci-app-traffic-shaper/Makefile
@@ -11,7 +11,12 @@ LUCI_DESCRIPTION:=Advanced traffic shaping with TC/CAKE for precise bandwidth co
 LUCI_DEPENDS:=+luci-base +rpcd +tc +kmod-sched-core +kmod-sched-cake
 
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.traffic-shaper:root:root:755
 
 include $(TOPDIR)/feeds/luci/luci.mk
diff --git a/luci-app-vhost-manager/Makefile b/luci-app-vhost-manager/Makefile
index 8619dadc..633835f0 100644
--- a/luci-app-vhost-manager/Makefile
+++ b/luci-app-vhost-manager/Makefile
@@ -15,7 +15,12 @@ LUCI_DEPENDS:=+luci-base +rpcd +nginx-ssl +acme +curl
 LUCI_PKGARCH:=all
 
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.vhost-manager:root:root:755
 
 include $(TOPDIR)/feeds/luci/luci.mk
diff --git a/luci-app-wireguard-dashboard/Makefile b/luci-app-wireguard-dashboard/Makefile
index 8883af97..0121b776 100644
--- a/luci-app-wireguard-dashboard/Makefile
+++ b/luci-app-wireguard-dashboard/Makefile
@@ -21,7 +21,12 @@ LUCI_DEPENDS:=+luci-base +luci-app-secubox +luci-lib-jsonc +rpcd +rpcd-mod-luci
 LUCI_PKGARCH:=all
 
 
-# File permissions (RPCD scripts must be executable)
+# File permissions (CRITICAL: RPCD scripts MUST be executable 755)
+# Format: path:owner:group:mode
+# - RPCD scripts: 755 (executable by root, required for ubus calls)
+# - Helper scripts: 755 (if executable)
+# - Config files: 644 (readable by all, writable by root)
+# - CSS/JS files: 644 (set automatically by luci.mk)
 PKG_FILE_MODES:=/usr/libexec/rpcd/luci.wireguard-dashboard:root:root:755
 
 include $(TOPDIR)/feeds/luci/luci.mk