mirror of
/repos/baseimage-docker.git
synced 2025-12-30 08:01:31 +01:00
Update readme
This commit is contained in:
parent
1357e9399e
commit
b9d788611a
@ -287,7 +287,7 @@ But note that:
|
|||||||
<a name="envvar_security"></a>
|
<a name="envvar_security"></a>
|
||||||
#### Security
|
#### Security
|
||||||
|
|
||||||
Because environment variables can potentially contain sensitive information, `/etc/container_environment` and its Bash and JSON dumps are by default owned by root, and root-accessible only. If you are sure that your environment variables don't contain sensitive data, then you can relax the permissions on that directory and those files by making them world-readable:
|
Because environment variables can potentially contain sensitive information, `/etc/container_environment` and its Bash and JSON dumps are by default owned by root, and accessible only by docker_env group (so any user added this group will have these variables automatically loaded). If you are sure that your environment variables don't contain sensitive data, then you can relax the permissions on that directory and those files by making them world-readable:
|
||||||
|
|
||||||
RUN chmod 755 /etc/container_environment
|
RUN chmod 755 /etc/container_environment
|
||||||
RUN chmod 644 /etc/container_environment.sh /etc/container_environment.json
|
RUN chmod 644 /etc/container_environment.sh /etc/container_environment.json
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user