eightball/all-in-one
1
0
Fork 0
mirror of https://github.com/nextcloud/all-in-one.git synced 2025-12-27 01:46:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

Drop NET_RAW from all containers in manual

Browse source 
#3377 drops NET_RAW from all containers, but this doesn't
appear to have been adopted into the manual mode.

Signed-off-by: Joshua Hesketh <josh@hesketh.net.au>
This commit is contained in:
Joshua Hesketh 2024-01-26 15:35:24 +11:00 • committed by Joshua Hesketh
parent 1cce2e535f
commit 1e26613960
2 changed files with 75 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

54
php/containers.json
View file

@ -65,6 +65,9 @@
"/usr/local/apache2/logs",
"/tmp",
"/home/www-data"
],
"cap_drop": [
"NET_RAW"
]
},
{
@ -112,6 +115,9 @@
"read_only": true,
"tmpfs": [
"/var/run/postgresql"
],
"cap_drop": [
"NET_RAW"
]
},
{
@ -226,6 +232,9 @@
],
"networks": [
"nextcloud-aio"
],
"cap_drop": [
"NET_RAW"
]
},
{
@ -263,7 +272,10 @@
"networks": [
"nextcloud-aio"
],
"read_only": true
"read_only": true,
"cap_drop": [
"NET_RAW"
]
},
{
"container_name": "nextcloud-aio-redis",
@ -295,7 +307,10 @@
"networks": [
"nextcloud-aio"
],
"read_only": true
"read_only": true,
"cap_drop": [
"NET_RAW"
]
},
{
"container_name": "nextcloud-aio-collabora",
@ -328,6 +343,9 @@
],
"cap_add": [
"MKNOD"
],
"cap_drop": [
"NET_RAW"
]
},
{
@ -380,6 +398,9 @@
"/opt/eturnal/run",
"/conf",
"/tmp"
],
"cap_drop": [
"NET_RAW"
]
},
{
@ -414,6 +435,9 @@
"tmpfs": [
"/tmp",
"/conf"
],
"cap_drop": [
"NET_RAW"
]
},
{
@ -472,6 +496,9 @@
"cap_add": [
"SYS_ADMIN"
],
"cap_drop": [
"NET_RAW"
],
"apparmor_unconfined": true,
"read_only": true,
"tmpfs": [
@ -494,7 +521,10 @@
"writeable": false
}
],
"read_only": true
"read_only": true,
"cap_drop": [
"NET_RAW"
]
},
{
"container_name": "nextcloud-aio-domaincheck",
@ -521,6 +551,9 @@
"tmpfs": [
"/etc/lighttpd",
"/var/www/domaincheck"
],
"cap_drop": [
"NET_RAW"
]
},
{
@ -556,6 +589,9 @@
"/var/lock",
"/var/log/clamav",
"/tmp"
],
"cap_drop": [
"NET_RAW"
]
},
{
@ -594,6 +630,9 @@
],
"networks": [
"nextcloud-aio"
],
"cap_drop": [
"NET_RAW"
]
},
{
@ -613,6 +652,9 @@
"cap_add": [
"SYS_NICE"
],
"cap_drop": [
"NET_RAW"
],
"profiles": [
"imaginary"
],
@ -662,6 +704,9 @@
],
"secrets": [
"FULLTEXTSEARCH_PASSWORD"
],
"cap_drop": [
"NET_RAW"
]
},
{
@ -685,6 +730,9 @@
"read_only": true,
"tmpfs": [
"/tmp"
],
"cap_drop": [
"NET_RAW"
]
}
]