Skip to content

Commit 9ff003c

Browse files
authored
security: run Etherpad container as non-root user (fixes #7134) (#7287)
Change the Docker Compose user from "0:0" (root) to "5001:0" (etherpad user) to follow security best practices and the principle of least privilege. The Dockerfile already creates a non-root user 'etherpad' with UID 5001 and GID 0, so this change aligns the docker-compose.yml configuration with the Dockerfile's security model. Benefits: - Reduces attack surface by not running as root - Follows Docker security best practices - Aligns with the Dockerfile's existing non-root user setup - Compatible with OpenShift and other platforms that restrict root containers - Maintains group permissions (GID 0) for volume access Fixes #7134
1 parent adca869 commit 9ff003c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docker-compose.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
services:
22
app:
3-
user: "0:0"
3+
user: "5001:0"
44
image: etherpad/etherpad:latest
55
tty: true
66
stdin_open: true

0 commit comments

Comments
 (0)