Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Drop permission of gunicorn container #35

Open
vpetersson opened this issue Jun 20, 2020 · 0 comments
Open

Drop permission of gunicorn container #35

vpetersson opened this issue Jun 20, 2020 · 0 comments

Comments

@vpetersson
Copy link
Contributor

Out of necessity (to access the bluetooth chip), the celery container must run as root. However, this is not true for the (publicly exposed) gunicorn container. We should drop permission of this container to nobody. As part of that, we also need to alter the permission of of the SQLite database (chown nobody:nobody) in order for the gunicorn container to be able to interact with the database.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant