allow cerebro user only to write files it must

lmenezes · Jan 5, 2022 · 28657e9 · 28657e9
1 parent 26b9c2f
commit 28657e9
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -15,7 +15,9 @@ COPY --from=builder /opt/cerebro /opt/cerebro
 
 RUN addgroup -gid 1000 cerebro \
  && adduser -q --system --no-create-home --disabled-login -gid 1000 -uid 1000 cerebro \
- && chown -R cerebro:cerebro /opt/cerebro
+ && chown -R root:root /opt/cerebro \
+ && chown -R cerebro:cerebro /opt/cerebro/logs \
+ && chown cerebro:cerebro /opt/cerebro
 
 WORKDIR /opt/cerebro
 USER cerebro