[jbosstools-issues] [JBoss JIRA] (ERT-517) Add basic security for running images [EBZ#519581]

[Jeff Johnston (JIRA)]

     [ https://issues.jboss.org/browse/ERT-517?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jeff Johnston reassigned ERT-517:
---------------------------------

    Assignee: Jeff Johnston


> Add basic security for running images [EBZ#519581]
> --------------------------------------------------
>
>                 Key: ERT-517
>                 URL: https://issues.jboss.org/browse/ERT-517
>             Project: Eclipse Release Train
>          Issue Type: Task
>          Components: Linux Tools
>            Reporter: Friendly Jira Robot
>            Assignee: Jeff Johnston
>              Labels: 6.1.0, Docker, bzira
>             Fix For: Oxygen.1 (4.7)
>
>
> In a blog by Daniel Walsh, it was recommended that Containers be run with readonly root fs (--readonly).  That said, to run most Containers successfully, this option also required accessing /run and /tmp in tmpfs (--tmpfs /run --tmpfs /tmp).
> A basic security option should be added to the Run Image Wizard to support:
> --readonly --tmpfs /run --tmpfs /tmp



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)