github/overleaf
1
0
Fork 0
mirror of https://github.com/overleaf/overleaf.git synced 2024-11-21 20:47:08 -05:00
Code Issues Projects Releases Packages Wiki Activity

[misc] narrow down the rw accessible directories for the run user (#119)

Browse source
This commit is contained in:
Jakob Ackermann 2020-01-29 12:14:32 +01:00 committed by GitHub
parent 6a5f1588cc
commit 16ca8f25c4
2 changed files with 1 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
server-ce/Dockerfile
View file

@ -26,7 +26,7 @@ ADD ${baseDir}/git-revision.sh /var/www/git-revision.sh
RUN cd /var/www && npm install
# Replace overleaf/config/services.js with the list of available
# Replace overleaf/config/services.js with the list of available
# services in Overleaf Community Edition
# --------------------------------------------------------------
ADD ${baseDir}/services.js /var/www/sharelatex/config/services.js
@ -49,11 +49,6 @@ RUN bash -c 'cd /var/www/sharelatex && source ./bin/compile-services'
RUN ln -s /var/www/sharelatex/clsi/bin/synctex /opt/synctex
# Change application ownership to www-data
# ----------------------------------------
RUN chown -R www-data:www-data /var/www/sharelatex;
# Copy runit service startup scripts to its location
# --------------------------------------------------
ADD ${baseDir}/runit /etc/service

2
server-ce/init_scripts/00_make_sharelatex_data_dirs.sh
View file

@ -26,8 +26,6 @@ chown www-data:www-data /var/lib/sharelatex/tmp/uploads
mkdir -p /var/lib/sharelatex/tmp/dumpFolder
chown www-data:www-data /var/lib/sharelatex/tmp/dumpFolder
chown www-data:www-data /var/www/
if [ ! -e "/var/lib/sharelatex/data/db.sqlite" ]; then
touch /var/lib/sharelatex/data/db.sqlite
fi