yahoo_1999/fk-wazuh
1
0
Fork 0
forked from wazuh/wazuh-docker
Code Pull Requests Activity

modify uid and giufor indexer and dashboard user and file permissions

Browse Source
This commit is contained in:
vcerenu
2024-03-04 07:51:00 -03:00
parent b274806f60
commit 6e7e8525bb
6 changed files with 24 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files
build-docker-images/wazuh-indexer/Dockerfile
+9 -9
View File
@@ -38,10 +38,10 @@ ENV USER="wazuh-indexer" \
RUN yum install curl-minimal shadow-utils findutils hostname -y
RUN getent group $GROUP || groupadd -r -g 1000 $GROUP
RUN getent group $GROUP || groupadd -r -g 999 $GROUP
RUN useradd --system \
--uid 1000 \
--uid 999 \
--no-create-home \
--home-dir $INSTALL_DIR \
--gid $GROUP \
@@ -57,19 +57,19 @@ COPY config/securityadmin.sh /
RUN chmod 700 /entrypoint.sh && chmod 700 /securityadmin.sh
RUN chown 1000:1000 /*.sh
RUN chown 999:999 /*.sh
COPY --from=builder --chown=1000:1000 /debian/wazuh-indexer/usr/share/wazuh-indexer /usr/share/wazuh-indexer
COPY --from=builder --chown=999:999 /debian/wazuh-indexer/usr/share/wazuh-indexer /usr/share/wazuh-indexer
COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/systemd /usr/lib/systemd
COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/sysctl.d /usr/lib/sysctl.d
COPY --from=builder --chown=0:0 /debian/wazuh-indexer/usr/lib/tmpfiles.d /usr/lib/tmpfiles.d
RUN chown -R 1000:1000 /usr/share/wazuh-indexer
RUN chown -R 999:999 /usr/share/wazuh-indexer
RUN mkdir -p /var/lib/wazuh-indexer && chown 1000:1000 /var/lib/wazuh-indexer && \
mkdir -p /usr/share/wazuh-indexer/logs && chown 1000:1000 /usr/share/wazuh-indexer/logs && \
mkdir -p /run/wazuh-indexer && chown 1000:1000 /run/wazuh-indexer && \
mkdir -p /var/log/wazuh-indexer && chown 1000:1000 /var/log/wazuh-indexer && \
RUN mkdir -p /var/lib/wazuh-indexer && chown 999:999 /var/lib/wazuh-indexer && \
mkdir -p /usr/share/wazuh-indexer/logs && chown 999:999 /usr/share/wazuh-indexer/logs && \
mkdir -p /run/wazuh-indexer && chown 999:999 /run/wazuh-indexer && \
mkdir -p /var/log/wazuh-indexer && chown 999:999 /var/log/wazuh-indexer && \
chmod 700 /usr/share/wazuh-indexer && \
chmod 600 /usr/share/wazuh-indexer/jvm.options && \
chmod 600 /usr/share/wazuh-indexer/opensearch.yml
build-docker-images/wazuh-indexer/config/entrypoint.sh
+2 -2
View File
@@ -34,7 +34,7 @@ if [[ "$1" != "opensearchwrapper" ]]; then
# `bin/opensearch -E x.y=z` would not work.
set -- "opensearch" "${@:2}"
# Use chroot to switch to UID 1000 / GID 0
exec chroot --userspec=1000:0 / "$@"
exec chroot --userspec=999:0 / "$@"
else
# User probably wants to run something else, like /bin/bash, with another uid forced (Openshift?)
exec "$@"
@@ -79,7 +79,7 @@ fi
if [[ "$(id -u)" == "0" ]]; then
# If requested and running as root, mutate the ownership of bind-mounts
if [[ -n "$TAKE_FILE_OWNERSHIP" ]]; then
chown -R 1000:0 /usr/share/wazuh-indexer/{data,logs}
chown -R 999:0 /usr/share/wazuh-indexer/{data,logs}
fi
fi