]
Jeff Johnston reassigned ERT-517:
---------------------------------
Assignee: Jeff Johnston
Add basic security for running images [EBZ#519581]
--------------------------------------------------
Key: ERT-517
URL:
https://issues.jboss.org/browse/ERT-517
Project: Eclipse Release Train
Issue Type: Task
Components: Linux Tools
Reporter: Friendly Jira Robot
Assignee: Jeff Johnston
Labels: 6.1.0, Docker, bzira
Fix For: Oxygen.1 (4.7)
In a blog by Daniel Walsh, it was recommended that Containers be run with readonly root
fs (--readonly). That said, to run most Containers successfully, this option also
required accessing /run and /tmp in tmpfs (--tmpfs /run --tmpfs /tmp).
A basic security option should be added to the Run Image Wizard to support:
--readonly --tmpfs /run --tmpfs /tmp