-
Feature Request
-
Resolution: Done
-
Major
-
None
-
None
need to harden docker image in a following way
The permissions on $CATALINA_HOME must be restrictive, in each repository:
- $ cd $CATALINA_HOME
- $ ls -l
Configure as shown below - more restictive settings will break various functionalities
sh-4.2$ cd /opt/webserver/ sh-4.2$ ls -altr total 56 drwxrwxrwx. 2 jboss jboss 6 Aug 11 2015 temp -r--r--r--. 1 jboss jboss 26530 Aug 25 2015 LICENSE.txt -r--r--r--. 1 jboss jboss 425 Aug 25 2015 JBossEULA.txt dr-xr-xr-x. 2 jboss jboss 4096 Aug 25 2015 extras drwxr-xr-x. 4 root root 31 Dec 10 13:29 .. lrwxrwxrwx. 1 jboss jboss 12 Dec 10 13:33 webapps -> /deployments drwxrwxrwx. 2 jboss jboss 4096 Dec 10 13:33 lib dr-xr-xr-x. 2 jboss jboss 4096 Dec 10 13:33 bin dr-xr-xr-x. 9 jboss jboss 4096 Jun 3 08:31 . drwxrwxrwx. 3 jboss jboss 4096 Jun 3 10:23 conf drwxrwxrwx. 3 jboss jboss 21 Jun 3 10:23 work drwxrwxrwx. 2 jboss jboss 4096 Jun 6 00:00 logs sh-4.2$ pwd /opt/webserver/extras sh-4.2$ ls -atlr total 652 -r--r--r--. 1 jboss jboss 486895 Jan 16 2013 log4j-eap6.jar -r--r--r--. 1 jboss jboss 49792 Oct 28 2014 jsvc -r--r--r--. 1 jboss jboss 78556 Aug 11 2015 tomcat-juli.jar -r--r--r--. 1 jboss jboss 31106 Aug 11 2015 tomcat-juli-adapters.jar -r--r--r--. 1 jboss jboss 542 Aug 11 2015 log4j.properties dr-xr-xr-x. 2 jboss jboss 4096 Aug 25 2015 . dr-xr-xr-x. 9 jboss jboss 4096 Jun 3 08:31 .. sh-4.2$ pwd /opt/webserver/bin sh-4.2$ ls -atlr total 228 -r--r--r--. 1 jboss jboss 29443 Mar 11 2015 commons-daemon.jar -r-xr-xr-x. 1 jboss jboss 1908 Aug 11 2015 version.sh -r-xr-xr-x. 1 jboss jboss 2591 Aug 11 2015 startup.sh -r-xr-xr-x. 1 jboss jboss 1902 Aug 11 2015 shutdown.sh -r-xr-xr-x. 1 jboss jboss 3547 Aug 11 2015 setclasspath.sh -r-xr-xr-x. 1 jboss jboss 1965 Aug 11 2015 digest.sh -r-xr-xr-x. 1 jboss jboss 7888 Aug 11 2015 daemon.sh -r-xr-xr-x. 1 jboss jboss 1922 Aug 11 2015 configtest.sh -r--r--r--. 1 jboss jboss 2187 Aug 11 2015 catalina-tasks.xml -r--r--r--. 1 jboss jboss 28404 Aug 11 2015 bootstrap.jar -r--r--r--. 1 jboss jboss 78556 Aug 11 2015 tomcat-juli.jar -r-xr-xr-x. 1 jboss jboss 5059 Aug 11 2015 tool-wrapper.sh lrwxrwxrwx. 1 jboss jboss 14 Dec 8 07:49 jsvc -> ../extras/jsvc -r-xr-xr-x. 1 jboss jboss 22269 Dec 8 07:49 catalina.sh -r-xr-xr-x. 1 jboss jboss 8585 Dec 10 13:23 launch.sh dr-xr-xr-x. 2 jboss jboss 4096 Dec 10 13:33 . dr-xr-xr-x. 9 jboss jboss 4096 Jun 3 08:31 .. sh-4.2$ cd lib/ sh-4.2$ pwd /opt/webserver/lib sh-4.2$ ls -atlr total 9104 -rw-rw-rw-. 1 jboss jboss 486895 Jan 16 2013 log4j-eap6.jar -rw-rw-rw-. 1 jboss jboss 2243920 Mar 5 2015 ecj-4.4.2-eap6.jar -rw-rw-rw-. 1 jboss jboss 36605 Aug 11 2015 websocket-api.jar -rw-rw-rw-. 1 jboss jboss 211236 Aug 11 2015 tomcat-websocket.jar -rw-rw-rw-. 1 jboss jboss 103233 Aug 11 2015 tomcat-util.jar -rw-rw-rw-. 1 jboss jboss 198059 Aug 11 2015 tomcat-util-scan.jar -rw-rw-rw-. 1 jboss jboss 54460 Aug 11 2015 tomcat-spdy.jar -rw-rw-rw-. 1 jboss jboss 65099 Aug 11 2015 tomcat-jni.jar -rw-rw-rw-. 1 jboss jboss 134043 Aug 11 2015 tomcat-jdbc.jar -rw-rw-rw-. 1 jboss jboss 43485 Aug 11 2015 tomcat-i18n-ja.jar sh-4.2$ cd conf/ sh-4.2$ ls -atlr total 400 -rw-rw-rw-. 1 jboss jboss 1846 Aug 11 2015 tomcat-users.xsd -rw-rw-rw-. 1 jboss jboss 7074 Aug 11 2015 catalina.properties -rw-rw-rw-. 1 jboss jboss 12374 Aug 11 2015 catalina.policy -rw-rw-rw-. 1 jboss jboss 169979 Jun 3 08:31 web.xml
