Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Review all users and permissions #23

Open
tabroughton opened this issue Aug 17, 2019 · 2 comments
Open

Review all users and permissions #23

tabroughton opened this issue Aug 17, 2019 · 2 comments
Labels
security
Milestone
Alpha Planning

Comments

@tabroughton
Copy link

We need to review all system users (eg. www-data) and that containers are being under an appropriate user, that services within containers are being run by the correct users and that all directories and files (especially on the host) have the correct permissions set.

An example of this in #22
@tabroughton
Copy link
Author

https://civicrm.org/advisory/civi-sa-2014-001-risk-information-disclosure

@tabroughton
Copy link
Author

https://jtreminio.com/blog/running-docker-containers-as-current-host-user/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
security
Projects
None yet
Milestone
Alpha Planning
Development

No branches or pull requests
1 participant
@tabroughton