Run insecureinc as www-data

Author: paul-ion

insecureinc/Dockerfile.insecureinc

@@ -11,4 +11,11 @@ RUN rm -rf /var/lib/apt/lists/* && \
 RUN rm -rf /usr/local/tomcat/webapps/ROOT
 # Copying insecure-inc-1.0.war from the build_image phase, rest everyting from last phase is discarded
 COPY --from=build_image /insecureinc/target/insecure-inc-1.0.war /usr/local/tomcat/webapps/ROOT.war
-EXPOSE 8080
+COPY start-insecureinc.sh /usr/local/tomcat/start-insecureinc.sh 
+RUN chmod +x /usr/local/tomcat/start-insecureinc.sh 
+RUN chown -R www-data:www-data /usr/local/tomcat/logs
+RUN chown -R www-data:www-data /usr/local/tomcat/webapps
+RUN chown -R www-data:www-data /usr/local/tomcat/work
+
+EXPOSE 8080
+ENTRYPOINT ["/bin/bash","-c","/usr/local/tomcat/start-insecureinc.sh" ]

insecureinc/start-insecureinc.sh

@@ -0,0 +1,2 @@
+export JAVA_OPTS="-DCHALLENGE_MASTER_SALT=$CHALLENGE_MASTER_SALT"
+su - www-data -s /bin/bash -c '/usr/local/tomcat/bin/catalina.sh run' -w JAVA_HOME,JAVA_OPTS