Skip to content

hardened permissions in dockerfile#445

Open
whotwagner wants to merge 1 commit intomainfrom
feature_harden_dockerfile
Open

hardened permissions in dockerfile#445
whotwagner wants to merge 1 commit intomainfrom
feature_harden_dockerfile

Conversation

@whotwagner
Copy link
Copy Markdown
Collaborator

Task

This pr fixes #444

Description

Changed Dockerfile to:

  • add appuser
  • change ownership of app-files to root
  • allow appuser only write-access to database and gemfile.lock

How Has This Been Tested?

not tested

Checklist

  • I have successfully run overcommit locally
  • I have added tests to cover my changes
  • I have linked the issue-id to the task-description
  • I have performed a self-review of my own code

@whotwagner whotwagner requested review from armins and arusa April 3, 2026 20:38
@whotwagner whotwagner self-assigned this Apr 3, 2026
Copy link
Copy Markdown
Collaborator

@armins armins left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

tested locally, still works.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Harden Dockerfile against filewrites

2 participants