mirror of
https://github.com/gyurix1968/guacamole-client.git
synced 2025-09-06 05:07:41 +00:00
GUACAMOLE-890: Security: Allow image to run as non-root user
This commit is contained in:
@@ -659,9 +659,15 @@ associate_header() {
|
||||
##
|
||||
start_guacamole() {
|
||||
|
||||
# User-only writable CATALINA_BASE
|
||||
export CATALINA_BASE=$HOME/tomcat
|
||||
for dir in logs temp webapps work; do
|
||||
mkdir -p $CATALINA_BASE/$dir
|
||||
done
|
||||
cp -R /usr/local/tomcat/conf $CATALINA_BASE
|
||||
|
||||
# Install webapp
|
||||
rm -Rf /usr/local/tomcat/webapps/${WEBAPP_CONTEXT:-guacamole}
|
||||
ln -sf /opt/guacamole/guacamole.war /usr/local/tomcat/webapps/${WEBAPP_CONTEXT:-guacamole}.war
|
||||
ln -sf /opt/guacamole/guacamole.war $CATALINA_BASE/webapps/${WEBAPP_CONTEXT:-guacamole}.war
|
||||
|
||||
# Start tomcat
|
||||
cd /usr/local/tomcat
|
||||
|
Reference in New Issue
Block a user