Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Docker uses default root user #1459

Closed
acequicksilver opened this issue Aug 4, 2020 · 0 comments
Closed

Docker uses default root user #1459

acequicksilver opened this issue Aug 4, 2020 · 0 comments

Comments

@acequicksilver
Copy link

Description

The Dockerfile used to build the lighthouse docker image currently does not use a non-privileged user but the default ubuntu root user

Version

master
f26adc0

Present Behaviour

Docker Image has runtime root privileges and in the event of a remote exploit the elevated privileges could be used to exploit other services.

Expected Behaviour

specific non-privileged user used for lighthouse execution

Steps to resolve

Please describe the steps required to resolve this issue, if known.

bors bot pushed a commit that referenced this issue Aug 31, 2020
#1502)

…d in the Docker image

## Issue Addressed
#1459

## Proposed Changes

- Create new `lighthouse` user and group in Docker container
- Set user as the default user
bors bot pushed a commit that referenced this issue Aug 31, 2020
#1502)

…d in the Docker image

## Issue Addressed
#1459

## Proposed Changes

- Create new `lighthouse` user and group in Docker container
- Set user as the default user
darcys22 pushed a commit to darcys22/lighthouse that referenced this issue Sep 5, 2020
sigp#1502)

…d in the Docker image

## Issue Addressed
sigp#1459

## Proposed Changes

- Create new `lighthouse` user and group in Docker container
- Set user as the default user
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant