Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Do not allow other users to read the generated SSL key/crt #141

Merged
merged 4 commits into from
Sep 25, 2024

Commits on Dec 15, 2023

  1. Do not allow any user to read the generated SSL key/crt

    We need to maintain the feature of being able to run the container as
    any user ID, so we cannot just leave the user to have read permissions
    for the generated key and certificate.
    
    However, there seems to be no use case for having the permissions
    for reading for other users. While being a different user inside a container
    might be not relevant anyway in the container case, let's rather be
    super cautious and remove the read permissions that are not needed.
    hhorak committed Dec 15, 2023
    Configuration menu
    Copy the full SHA
    ba887da View commit details
    Browse the repository at this point in the history
  2. Add quotes

    hhorak committed Dec 15, 2023
    Configuration menu
    Copy the full SHA
    b9cede9 View commit details
    Browse the repository at this point in the history

Commits on Sep 25, 2024

  1. Update permissions also for micro images

    Signed-off-by: Petr "Stone" Hracek <phracek@redhat.com>
    phracek committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    c876a95 View commit details
    Browse the repository at this point in the history
  2. Update container-common-scripts

    Signed-off-by: Petr "Stone" Hracek <phracek@redhat.com>
    phracek committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    5a4b35d View commit details
    Browse the repository at this point in the history