element-hq / element-hq/synapse
Docker Container Filesystem Permissions: Synapse shouldn't be able to modify its own executable
Open
A-Docker
T-Enhancement
- Dominant language
- Python
- Stars
- 4.6k
- Forks
- 600
- Avg merge
- 5d 22h
- Merged PRs (30d)
- 51
Description
This issue has been migrated from [#10726](https://github.com/matrix-org/synapse/issues/10726).
---
```
[root@application1 merged]# find . -perm /o=w -type f
./conf/homeserver.yaml
./conf/log.config
./start.py
```
Placing files on unix that are writeable by "others" can cause severe security issues. A secure application should not be able to modify its own executables.
Contributor guide
Assessment
This issue has not been assessed yet.