WebGoat no longer runs as root in the Docker container.

chencool · Jul 26, 2017 · 0b92a57 · 0b92a57
1 parent b06fb72
commit 0b92a57
Showing 1 changed file with 7 additions and 5 deletions.
diff --git a/webgoat-server/src/main/docker/Dockerfile b/webgoat-server/src/main/docker/Dockerfile
@@ -1,6 +1,8 @@
 FROM openjdk:8-jre
-VOLUME /tmp
-RUN cd /root; mkdir -p .webgoat
-ADD webgoat-server-8.0-SNAPSHOT.jar webgoat.jar
-RUN sh -c 'touch /webgoat.jar'
-ENTRYPOINT ["java","-Djava.security.egd=file:/dev/./urandom","-jar","/webgoat.jar"]
+
+RUN useradd --home-dir /home/webgoat --create-home -U webgoat
+
+USER webgoat
+RUN cd /home/webgoat/; mkdir -p .webgoat
+COPY webgoat-server-8.0-SNAPSHOT.jar /home/webgoat/webgoat.jar
+ENTRYPOINT ["java","-Djava.security.egd=file:/dev/./urandom","-jar","/home/webgoat/webgoat.jar"]