Skip to content
Snippets Groups Projects
  • Steven Dake's avatar
    4c9e15b9
    Drop root privileges for mariadb · 4c9e15b9
    Steven Dake authored
    Drop root privileges for mariadb.  This isn't perfect.  If somemone
    breaks out of the container and can run sudo within the contianer,
    it would be possible to replace the root credentials of the database.
    
    Any container that uses sudo suffers from some extra attack vector
    related to the sudo command.  That said, the sudo commands are
    locked down to minimize harm.
    
    Change-Id: I4b3573725d940bb8aa90d43a6235d8cf7d30fc64
    Partially-Implements: blueprint drop-root
    4c9e15b9
    History
    Drop root privileges for mariadb
    Steven Dake authored
    Drop root privileges for mariadb.  This isn't perfect.  If somemone
    breaks out of the container and can run sudo within the contianer,
    it would be possible to replace the root credentials of the database.
    
    Any container that uses sudo suffers from some extra attack vector
    related to the sudo command.  That said, the sudo commands are
    locked down to minimize harm.
    
    Change-Id: I4b3573725d940bb8aa90d43a6235d8cf7d30fc64
    Partially-Implements: blueprint drop-root