From bb0fd043c341a4aaf76f1c04a9869c47283055f0 Mon Sep 17 00:00:00 2001 From: William Desportes Date: Tue, 14 Jan 2025 14:20:47 +0100 Subject: [PATCH] Make all files read only, except tmp --- Dockerfile-alpine.template | 5 ++++- Dockerfile-debian.template | 5 ++++- apache/Dockerfile | 5 ++++- fpm-alpine/Dockerfile | 5 ++++- fpm/Dockerfile | 5 ++++- 5 files changed, 20 insertions(+), 5 deletions(-) diff --git a/Dockerfile-alpine.template b/Dockerfile-alpine.template index fab3993..1bccbb3 100644 --- a/Dockerfile-alpine.template +++ b/Dockerfile-alpine.template @@ -117,7 +117,10 @@ RUN set -ex; \ grep -q -F "'configFile' => ROOT_PATH . 'config.inc.php'," /var/www/html/libraries/vendor_config.php; \ sed -i "s@'configFile' => .*@'configFile' => '/etc/phpmyadmin/config.inc.php',@" /var/www/html/libraries/vendor_config.php; \ grep -q -F "'configFile' => '/etc/phpmyadmin/config.inc.php'," /var/www/html/libraries/vendor_config.php; \ - php -l /var/www/html/libraries/vendor_config.php; + php -l /var/www/html/libraries/vendor_config.php; \ + find /var/www/html -type d -exec chmod 555 {} \;; \ + find /var/www/html -type f -exec chmod 444 {} \;; \ + chmod 777 /var/www/html/tmp; # Copy configuration COPY --chown=www-data:www-data config.inc.php /etc/phpmyadmin/config.inc.php diff --git a/Dockerfile-debian.template b/Dockerfile-debian.template index 14be50b..414482e 100644 --- a/Dockerfile-debian.template +++ b/Dockerfile-debian.template @@ -136,7 +136,10 @@ RUN set -ex; \ grep -q -F "'configFile' => ROOT_PATH . 'config.inc.php'," /var/www/html/libraries/vendor_config.php; \ sed -i "s@'configFile' => .*@'configFile' => '/etc/phpmyadmin/config.inc.php',@" /var/www/html/libraries/vendor_config.php; \ grep -q -F "'configFile' => '/etc/phpmyadmin/config.inc.php'," /var/www/html/libraries/vendor_config.php; \ - php -l /var/www/html/libraries/vendor_config.php; + php -l /var/www/html/libraries/vendor_config.php; \ + find /var/www/html -type d -exec chmod 555 {} \;; \ + find /var/www/html -type f -exec chmod 444 {} \;; \ + chmod 777 /var/www/html/tmp; # Copy configuration COPY --chown=www-data:www-data config.inc.php /etc/phpmyadmin/config.inc.php diff --git a/apache/Dockerfile b/apache/Dockerfile index a8b2eb6..5357fc7 100644 --- a/apache/Dockerfile +++ b/apache/Dockerfile @@ -137,7 +137,10 @@ RUN set -ex; \ grep -q -F "'configFile' => ROOT_PATH . 'config.inc.php'," /var/www/html/libraries/vendor_config.php; \ sed -i "s@'configFile' => .*@'configFile' => '/etc/phpmyadmin/config.inc.php',@" /var/www/html/libraries/vendor_config.php; \ grep -q -F "'configFile' => '/etc/phpmyadmin/config.inc.php'," /var/www/html/libraries/vendor_config.php; \ - php -l /var/www/html/libraries/vendor_config.php; + php -l /var/www/html/libraries/vendor_config.php; \ + find /var/www/html -type d -exec chmod 555 {} \;; \ + find /var/www/html -type f -exec chmod 444 {} \;; \ + chmod 777 /var/www/html/tmp; # Copy configuration COPY --chown=www-data:www-data config.inc.php /etc/phpmyadmin/config.inc.php diff --git a/fpm-alpine/Dockerfile b/fpm-alpine/Dockerfile index 8335eb1..082b20b 100644 --- a/fpm-alpine/Dockerfile +++ b/fpm-alpine/Dockerfile @@ -118,7 +118,10 @@ RUN set -ex; \ grep -q -F "'configFile' => ROOT_PATH . 'config.inc.php'," /var/www/html/libraries/vendor_config.php; \ sed -i "s@'configFile' => .*@'configFile' => '/etc/phpmyadmin/config.inc.php',@" /var/www/html/libraries/vendor_config.php; \ grep -q -F "'configFile' => '/etc/phpmyadmin/config.inc.php'," /var/www/html/libraries/vendor_config.php; \ - php -l /var/www/html/libraries/vendor_config.php; + php -l /var/www/html/libraries/vendor_config.php; \ + find /var/www/html -type d -exec chmod 555 {} \;; \ + find /var/www/html -type f -exec chmod 444 {} \;; \ + chmod 777 /var/www/html/tmp; # Copy configuration COPY --chown=www-data:www-data config.inc.php /etc/phpmyadmin/config.inc.php diff --git a/fpm/Dockerfile b/fpm/Dockerfile index 9da7244..b6ab49c 100644 --- a/fpm/Dockerfile +++ b/fpm/Dockerfile @@ -134,7 +134,10 @@ RUN set -ex; \ grep -q -F "'configFile' => ROOT_PATH . 'config.inc.php'," /var/www/html/libraries/vendor_config.php; \ sed -i "s@'configFile' => .*@'configFile' => '/etc/phpmyadmin/config.inc.php',@" /var/www/html/libraries/vendor_config.php; \ grep -q -F "'configFile' => '/etc/phpmyadmin/config.inc.php'," /var/www/html/libraries/vendor_config.php; \ - php -l /var/www/html/libraries/vendor_config.php; + php -l /var/www/html/libraries/vendor_config.php; \ + find /var/www/html -type d -exec chmod 555 {} \;; \ + find /var/www/html -type f -exec chmod 444 {} \;; \ + chmod 777 /var/www/html/tmp; # Copy configuration COPY --chown=www-data:www-data config.inc.php /etc/phpmyadmin/config.inc.php