1
0
mirror of https://github.com/zokradonh/kopano-docker synced 2025-06-07 16:06:14 +00:00

drop cap_* for kweb (#323)

explicit capabilities are not longer required since the process is now running as nobody

fixes #322

Signed-off-by: Felix Bartels <felix@host-consultants.de>
This commit is contained in:
Felix Bartels 2020-01-17 12:28:18 +01:00 committed by GitHub
parent b72359d000
commit 52d3e366e5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -10,13 +10,6 @@ services:
- EMAIL=${EMAIL:-off} - EMAIL=${EMAIL:-off}
- FQDN=${FQDNCLEANED?err} - FQDN=${FQDNCLEANED?err}
command: wrapper.sh command: wrapper.sh
cap_drop:
- ALL
cap_add:
- CHOWN
- NET_BIND_SERVICE
- SETGID
- SETUID
volumes: volumes:
- /etc/machine-id:/etc/machine-id - /etc/machine-id:/etc/machine-id
- /var/lib/dbus/machine-id:/var/lib/dbus/machine-id - /var/lib/dbus/machine-id:/var/lib/dbus/machine-id