arno/keepass2
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

make keepass2 grsec friendly

Browse Source
This commit is contained in:
Andy 2016-05-19 13:52:47 +02:00
parent 0e47537d7a
commit 3098181437
Signed by: arno
GPG Key ID: 368DDA2E9A471EAC
1 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Dockerfile
View File

@ -5,9 +5,19 @@ MAINTAINER Andrey Arapov <andrey.arapov@nixaid.com>
ENV DEBIAN_FRONTEND noninteractive ENV DEBIAN_FRONTEND noninteractive
RUN apt-get update RUN apt-get update
RUN apt-get install -yq keepass2 xdotool \ RUN apt-get install -yq keepass2 xdotool paxctl \
&& rm -rf /var/lib/apt/lists && rm -rf /var/lib/apt/lists
# make KeePass2 grsec friendly
# m: Disable MPROTECT // grsec: denied RWX mmap of <anonymous mapping>
# (runtime only, since xattrs are not preserved in Docker's final image)
# RUN setfattr -n user.pax.flags -v "m" /usr/bin/mono-sgen
#
# (permanent change, by converting the binary headers PT_GNU_STACK into PT_PAX_FLAGS)
# m: Disable MPROTECT // grsec: denied RWX mmap of <anonymous mapping>
RUN paxctl -c -v -m /usr/bin/mono-sgen
ENV USER user ENV USER user
ENV UID 1000 ENV UID 1000
ENV HOME /home/$USER ENV HOME /home/$USER