kolla-ansible/docker/base
Steven Dake 4c9e15b94e Drop root privileges for mariadb
Drop root privileges for mariadb.  This isn't perfect.  If somemone
breaks out of the container and can run sudo within the contianer,
it would be possible to replace the root credentials of the database.

Any container that uses sudo suffers from some extra attack vector
related to the sudo command.  That said, the sudo commands are
locked down to minimize harm.

Change-Id: I4b3573725d940bb8aa90d43a6235d8cf7d30fc64
Partially-Implements: blueprint drop-root
2015-11-12 03:12:40 -05:00
..
ceph.yum.repo Increase Ceph RPM gpg key timeout to 90 seconds 2015-10-20 16:28:19 -04:00
Dockerfile.j2 Base image changes for drop-root 2015-11-09 11:00:26 -05:00
mariadb.yum.repo Move docker_templates to docker dir 2015-08-28 13:33:50 +00:00
set_configs.py Bring Kolla inline with FHS 2015-10-06 03:30:53 +00:00
sources.list Remove ceph as external repo 2015-09-19 05:37:41 +00:00
start.sh Base image changes for drop-root 2015-11-09 11:00:26 -05:00
sudoers Drop root privileges for mariadb 2015-11-12 03:12:40 -05:00