You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Run aidbox as non-root user inside the docker container.
The expected benefit
Although docker is fairly secure even if an attacker gains root in a container, it is recommended to run applications as unprivileged users inside docker containers anyway. This helps damage limitation when e.g. RCE vulnerabilities are discovered in running software.
Hi @MFAshby
We changed the user under which Aidbox runs. This is now a non-root user named aidbox (uid 1000)
We also changed the base image to Alpine
Changes to come in the next release
You can test these changes on the :edge version
I need the following improvement
Run aidbox as non-root user inside the docker container.
The expected benefit
Although docker is fairly secure even if an attacker gains root in a container, it is recommended to run applications as unprivileged users inside docker containers anyway. This helps damage limitation when e.g. RCE vulnerabilities are discovered in running software.
https://docs.docker.com/engine/security/#conclusions
Additional context
Currently aidbox/multibox runs as root inside the container
The text was updated successfully, but these errors were encountered: