mirror of
https://github.com/zokradonh/kopano-docker
synced 2025-06-07 16:06:14 +00:00
drop cap_* for kweb (#323)
explicit capabilities are not longer required since the process is now running as nobody fixes #322 Signed-off-by: Felix Bartels <felix@host-consultants.de>
This commit is contained in:
parent
b72359d000
commit
52d3e366e5
@ -10,13 +10,6 @@ services:
|
|||||||
- EMAIL=${EMAIL:-off}
|
- EMAIL=${EMAIL:-off}
|
||||||
- FQDN=${FQDNCLEANED?err}
|
- FQDN=${FQDNCLEANED?err}
|
||||||
command: wrapper.sh
|
command: wrapper.sh
|
||||||
cap_drop:
|
|
||||||
- ALL
|
|
||||||
cap_add:
|
|
||||||
- CHOWN
|
|
||||||
- NET_BIND_SERVICE
|
|
||||||
- SETGID
|
|
||||||
- SETUID
|
|
||||||
volumes:
|
volumes:
|
||||||
- /etc/machine-id:/etc/machine-id
|
- /etc/machine-id:/etc/machine-id
|
||||||
- /var/lib/dbus/machine-id:/var/lib/dbus/machine-id
|
- /var/lib/dbus/machine-id:/var/lib/dbus/machine-id
|
||||||
|
Loading…
x
Reference in New Issue
Block a user