sv/tsun-gen3-proxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Hardening (#30)

Browse Source 
* set build-argument for environment

* hardening remove dangerous commands

* add hardening scripts for base and final image
This commit is contained in:
Stefan Allius
2023-11-22 21:57:42 +01:00
committed by GitHub
parent f10207b5ba
commit e2873ffce7
6 changed files with 59 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/entrypoint.sh
View File

@@ -11,10 +11,12 @@ if [ "$user" = '0' ]; then
mkdir -p /home/$SERVICE_NAME/log /home/$SERVICE_NAME/config
if ! id $SERVICE_NAME &> /dev/null; then
echo "# create user"
addgroup --gid $GID $SERVICE_NAME 2> /dev/null
adduser -G $SERVICE_NAME -s /bin/false -D -H -g "" -u $UID $SERVICE_NAME
chown -R $SERVICE_NAME:$SERVICE_NAME /home/$SERVICE_NAME || true
rm -fr /usr/sbin/addgroup /usr/sbin/adduser /bin/chown
fi
chown -R $SERVICE_NAME:$SERVICE_NAME /home/$SERVICE_NAME || true
echo "######################################################"
echo "#"