Skip to content

Commit 12ce23c

Browse files
operetz-rhnemerna
authored andcommitted
restrict DVC binary permissions to owner-only
1 parent 9a48e66 commit 12ce23c

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

src/main/docker/Dockerfile.jvm

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,9 @@ ENV LANGUAGE='en_US:en'
8686
USER 0
8787
RUN microdnf install -y python3 python3-pip git && \
8888
pip3 install --no-cache-dir dvc dvc-s3 && \
89-
microdnf clean all
89+
microdnf clean all && \
90+
chown 185:185 /usr/local/bin/dvc && \
91+
chmod 700 /usr/local/bin/dvc
9092
USER 185
9193

9294
# We make four distinct layers so if there are application changes the library layers can be re-used

0 commit comments

Comments
 (0)