[jira] [Commented] (GUACAMOLE-890) Guacamole/Guacd Docker Process Privilege Drop

["Jotam (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GUACAMOLE-890?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17025917#comment-17025917 ] 

Jotam commented on GUACAMOLE-890:
---------------------------------

You're right, we can easily choose a non-root user for the _guacd_ container, through the compose file, or using _-u_ option of the _docker run_ command.

Unfortunately, this does not work for the guacamole container... We then have one of the 2 components running as root, which is not really a good thing...

Could we then have a look at this security issue please ?

Would be nice to have this fixed for the 1.1.0 release.

Many thanks !

> Guacamole/Guacd Docker Process Privilege Drop
> ---------------------------------------------
>
>                 Key: GUACAMOLE-890
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-890
>             Project: Guacamole
>          Issue Type: Improvement
>          Components: guacamole-docker
>            Reporter: Anthony Boccia
>            Priority: Minor
>              Labels: docker, security
>
> Hello,
> I noticed after deploying Guacamole in docker that the processes all run as the root user. Are there any plans to add support for specifying a user for the processes to drop privs to and run as instead of root? I am currently doing this rebuilding the containers for guacamole and guacd adding in my own user and using docker compose to exec all processes triggered within the container as that user. I feel like the option to specify this should be done upstream.
> Thank You



--
This message was sent by Atlassian Jira
(v8.3.4#803005)