mirror of
https://github.com/zokradonh/kopano-docker
synced 2025-06-07 16:06:14 +00:00
drop cap_* for kweb (#323)
explicit capabilities are not longer required since the process is now running as nobody fixes #322 Signed-off-by: Felix Bartels <felix@host-consultants.de>
This commit is contained in:
parent
b72359d000
commit
52d3e366e5
@ -10,13 +10,6 @@ services:
|
||||
- EMAIL=${EMAIL:-off}
|
||||
- FQDN=${FQDNCLEANED?err}
|
||||
command: wrapper.sh
|
||||
cap_drop:
|
||||
- ALL
|
||||
cap_add:
|
||||
- CHOWN
|
||||
- NET_BIND_SERVICE
|
||||
- SETGID
|
||||
- SETUID
|
||||
volumes:
|
||||
- /etc/machine-id:/etc/machine-id
|
||||
- /var/lib/dbus/machine-id:/var/lib/dbus/machine-id
|
||||
|
Loading…
x
Reference in New Issue
Block a user