From 6705197a3525d625b5605ec883fd738d9fc09270 Mon Sep 17 00:00:00 2001 From: Harold <73724671+HaroldVB@users.noreply.github.com> Date: Wed, 4 Jan 2023 20:10:18 +0100 Subject: [PATCH] Giving Read Only rights to homepage Giving Read Only rights to homepage container. Adding :RO to the docker.sock volume. When the container gets compromised the intruder will have root access basically. The container doesn't need the write privileges. This measure will stop inexperienced people from exposing their docker.socket to the public internet. --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index ec2e1e682..e19252aee 100644 --- a/README.md +++ b/README.md @@ -85,7 +85,7 @@ services: - 3000:3000 volumes: - /path/to/config:/app/config # Make sure your local config directory exists - - /var/run/docker.sock:/var/run/docker.sock # (optional) For docker integrations + - /var/run/docker.sock:/var/run/docker.sock:ro # (optional) For docker integrations ``` or docker run: