[jira] [Commented] (GUACAMOLE-890) Guacamole/Guacd Docker Process Privilege Drop

["Robert Baptista (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/GUACAMOLE-890?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16998832#comment-16998832 ] 

Robert Baptista commented on GUACAMOLE-890:
-------------------------------------------

I've had no issue specifying a uid/gid in a compose file for the standard guacd image and having everything function as expected. I think the majority of the work in this area is on the guacamole container.

> Guacamole/Guacd Docker Process Privilege Drop
> ---------------------------------------------
>
>                 Key: GUACAMOLE-890
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-890
>             Project: Guacamole
>          Issue Type: Improvement
>          Components: guacamole-docker
>            Reporter: Anthony Boccia
>            Priority: Minor
>              Labels: docker, security
>
> Hello,
> I noticed after deploying Guacamole in docker that the processes all run as the root user. Are there any plans to add support for specifying a user for the processes to drop privs to and run as instead of root? I am currently doing this rebuilding the containers for guacamole and guacd adding in my own user and using docker compose to exec all processes triggered within the container as that user. I feel like the option to specify this should be done upstream.
> Thank You



--
This message was sent by Atlassian Jira
(v8.3.4#803005)