Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use non-privileged user in Dockerfile #15816

Closed
Doctor-love opened this issue Jan 5, 2018 · 4 comments
Closed

Use non-privileged user in Dockerfile #15816

Doctor-love opened this issue Jan 5, 2018 · 4 comments

Comments

@Doctor-love
Copy link

Currently, the Dockerfile used to build the official Docker images runs geth as root.
This is not required as far as I can tell from my usage and not a good practice security wise.

I suggest using the Dockerfile directive "USER" or switching to a low privileged user using gosu.

@alexkohler
Copy link

Wouldn't the package management (i.e. apk add) still require root permissions?

@Doctor-love
Copy link
Author

Privileges could be dropped after the package installation and setup has been completed

@fjl fjl closed this as completed in #16052 Apr 5, 2018
@jeanlucmongrain
Copy link

This issue had been """"""""""""""fixed"""""""""""""" in the worst possible way issue should be reopen

@jeanlucmongrain
Copy link

#16052 (comment)

this task should be reopen

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants