diff options
| author |   Pawel Wieczorek <p.wieczorek2@samsung.com> | 2020-03-30 11:50:46 +0200 |
|---|---|---|
| committer |   Sunder Tattavarada <statta@research.att.com> | 2020-04-03 16:48:02 +0000 |
| commit | fa08f47c5fd09a55ff33cf9e3fe857dcf41ff30a (patch) | |
| tree | 2ac5d89ccc4744705147f9c7893c3fc3dfb39f9e | |
| parent | ae737cbbbe7c602e46a6093db9ae924900e603e5 (diff) | |
Migrate Dockerfile.widgetms to unprivileged user
Issue-ID: PORTAL-849
Change-Id: Ia6e96c72a0a7f4a7d7693688365c683227bef6d3
Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
(cherry picked from commit edebaff8d9225b23adac727b983e2c3890cd7ee1)
| -rw-r--r-- | deliveries/Dockerfile.widgetms | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/deliveries/Dockerfile.widgetms b/deliveries/Dockerfile.widgetms index 82a2e4c6..8f4b1072 100644 --- a/deliveries/Dockerfile.widgetms +++ b/deliveries/Dockerfile.widgetms @@ -14,7 +14,9 @@ RUN sh -c 'touch /app.jar' # Launch script COPY start-wms.sh / +# Switch to unprivileged user RUN addgroup -g 1000 -S portal && adduser -u 1000 -S portal -G portal && mkdir logs / && chown -R portal:portal /start-wms.sh /tmp /etc/ssl/certs/java /logs && chmod -R 755 /start-wms.sh /etc/ssl/certs/java /logs /tmp +USER portal # Define default command CMD /start-wms.sh |