targets: base-files: diag.sh does not need to be executable