flywithu/kopano-docker
1
0
Fork 0
mirror of https://github.com/zokradonh/kopano-docker synced 2025-10-31 10:27:14 +00:00
Code Issues Releases Wiki Activity

drop cap_* for kweb (#323)

Browse Source 
explicit capabilities are not longer required since the process is now running as nobody

fixes #322

Signed-off-by: Felix Bartels <felix@host-consultants.de>
This commit is contained in:
Felix Bartels 2020-01-17 12:28:18 +01:00 committed by GitHub
parent b72359d000
commit 52d3e366e5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 0 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
docker-compose.yml
View File

@ -10,13 +10,6 @@ services:
- EMAIL=${EMAIL:-off} - EMAIL=${EMAIL:-off}
- FQDN=${FQDNCLEANED?err} - FQDN=${FQDNCLEANED?err}
command: wrapper.sh command: wrapper.sh
cap_drop:
- ALL
cap_add:
- CHOWN
- NET_BIND_SERVICE
- SETGID
- SETUID
volumes: volumes:
- /etc/machine-id:/etc/machine-id - /etc/machine-id:/etc/machine-id
- /var/lib/dbus/machine-id:/var/lib/dbus/machine-id - /var/lib/dbus/machine-id:/var/lib/dbus/machine-id