inteligr8/acs-community-packaging
1
0
Fork 0
mirror of https://github.com/Alfresco/acs-community-packaging.git synced 2026-09-16 18:13:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

REPO-3275: Secure tomcat in Alfresco Content Services docker images.

Browse Source 
Make alfresco and ROOT directories and it's content read-only
This commit is contained in:
Alexandru Epure
2018-05-21 15:40:54 +03:00
parent 842f8f3509
commit d9999184a4
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker-alfresco/Dockerfile
+2 -2
View File
@@ -96,8 +96,8 @@ RUN java -jar /usr/local/tomcat/alfresco-mmt/alfresco-mmt*.jar install \
# Docker CMD from parent image starts the server
# Unpack ROOT.war
RUN mkdir /usr/local/tomcat/webapps/ROOT && cd /usr/local/tomcat/webapps/ROOT && jar -xvf /usr/local/tomcat/webapps/ROOT.war && rm -f /usr/local/tomcat/webapps/ROOT.war && \
# Unpack ROOT.war and make alfresco and ROOT read-only.
RUN mkdir /usr/local/tomcat/webapps/ROOT && cd /usr/local/tomcat/webapps/ROOT && jar -xvf /usr/local/tomcat/webapps/ROOT.war && rm -f /usr/local/tomcat/webapps/ROOT.war && chmod -R =r /usr/local/tomcat/webapps/ROOT && chmod -R =r /usr/local/tomcat/webapps/alfresco && \
# Add catalina.policy to ROOT.war and alfresco.war
# Grant all security permissions to alfresco webapp because of numerous permissions required in order to work properly.
# Grant only deployXmlPermission to ROOT webapp.