Compare commits

..

No commits in common. "7af8fdf8986ecfd813ff5fe0b6d3057f68214f30" and "fea46b2af337ddb4cbf80bbf8b81dd6d6cada0f8" have entirely different histories.

2 changed files with 3 additions and 14 deletions

View file

@ -290,23 +290,13 @@ or use Dotclear buitin update system but themes wiil not be updated.
* Add mail support. * Add mail support.
### 5. SECURITY ### 5. CONTRIBUTING
* Nginx master process runs as root and set uid/gid to user www
* PHP-FPM master process runs as root and set uid/gid to user www
* Docker image entrypoint runs as root and set runuser to www at its end
* Dotclear application files are chown to user www
For security report see [SECURITY file](/SECURITY.md) or open a ticket on github repository.
### 6. CONTRIBUTING
This image is an open source project. If you'd like to contribute, please read the [CONTRIBUTING file](/CONTRIBUTING.md). This image is an open source project. If you'd like to contribute, please read the [CONTRIBUTING file](/CONTRIBUTING.md).
You can submit a pull request, or feel free to use any other way you'd prefer. You can submit a pull request, or feel free to use any other way you'd prefer.
### 7. LICENSE ### 6. LICENSE
Copyright Jean-Christian Paul Denis Copyright Jean-Christian Paul Denis
AGPL-v3 <https://www.gnu.org/licenses/agpl-3.0.html> AGPL-v3 <https://www.gnu.org/licenses/agpl-3.0.html>

View file

@ -99,5 +99,4 @@ echo >&2 '└──'
php-fpm84 -D # FPM must start first in daemon mode php-fpm84 -D # FPM must start first in daemon mode
nginx # Then nginx in no daemon mode nginx # Then nginx in no daemon mode
# Switch from user root to wwww exec su - www -c "$*"
exec runuser -u www "$@"