fix: remove world access to existing data

fix: set umask closes #6
2025-04-03 17:06:53 -03:00 · 2025-03-31 15:40:03 -03:00
2 changed files with 5 additions and 1 deletions
@@ -1,4 +1,4 @@
-export APP_ENTRYPOINT_VERSION=v3
+export APP_ENTRYPOINT_VERSION=v4
 APP_DIR="app:/data"

 insert_vaultwarden_admin_token() {
@@ -1,6 +1,7 @@
 #!/bin/bash

 set -e
+umask 027

 # set DATABASE_URL with db_password
 set_db_url() {
@@ -48,6 +49,9 @@ fi
 file_env "ADMIN_TOKEN"
 file_env "SMTP_PASSWORD"

+# remove world permissions on data
+chmod -R o= /data
+
 # upstream startup command
 # https://github.com/dani-garcia/vaultwarden/blob/60ed5ff99d15dec0b82c85987f9a3e244b8bde91/docker/Dockerfile.j2#L254
 /start.sh
Author	SHA1	Message	Date
fauno	cab11b0e2a	fix: remove world access to existing data	2025-04-03 17:06:53 -03:00
fauno	938e4671b4	fix: set umask closes #6	2025-03-31 15:40:03 -03:00