lyrathorpe/legacy-email-proxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Run the container as a non-root user #7

New Issue
Closed
opened 2026-06-17 17:12:34 +01:00 by lyrathorpe · 0 comments
lyrathorpe commented 2026-06-17 17:12:34 +01:00
Owner
Copy Link
Copy Source

The Dockerfile runs the process as root. The proxy needs no root privileges at runtime (ports 110/25 are published via the host mapping, not bound inside a restricted namespace requiring CAP_NET_BIND_SERVICE in the default Docker config — confirm during implementation).

Fix:

  • Create a dedicated non-root user in the Dockerfile and switch to it with USER before CMD.
  • Verify the published port mapping still works (docker run -p 110:110 -p 25:25 ...).

Acceptance:

  • The container process runs as a non-root UID.
  • POP3/SMTP remain reachable via the documented port mapping.
The Dockerfile runs the process as root. The proxy needs no root privileges at runtime (ports 110/25 are published via the host mapping, not bound inside a restricted namespace requiring CAP_NET_BIND_SERVICE in the default Docker config — confirm during implementation). Fix: - Create a dedicated non-root user in the Dockerfile and switch to it with USER before CMD. - Verify the published port mapping still works (docker run -p 110:110 -p 25:25 ...). Acceptance: - The container process runs as a non-root UID. - POP3/SMTP remain reachable via the documented port mapping.
lyrathorpe added the security label 2026-06-17 17:12:34 +01:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
Defect / incorrect behaviour
 ci
CI / build pipeline
 docs
Documentation
 enhancement
Improvement to existing behaviour
 security
Security hardening
No Label security
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
lyrathorpe
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: lyrathorpe/legacy-email-proxy#7
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?