Lucas RayanandClaude Sonnet 5.5
640e52c0c9
The previous GitHub history was lost with the account (the local .git was missing its refs and most objects), so this repository starts from the existing code. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
10 lines
634 B
Plaintext
10 lines
634 B
Plaintext
# DS-0002: "Specify at least 1 USER command in Dockerfile with non-root user".
|
|
# Accepted risk, deliberately: CraftDock's entire purpose is to control the
|
|
# Minecraft container through /var/run/docker.sock (root-equivalent by design)
|
|
# and to read/write world files the game server creates with mixed ownership.
|
|
# Running as a non-root user would break the docker.sock connection on most
|
|
# hosts (socket is root:docker with a host-specific GID) without reducing the
|
|
# real attack surface — the socket mount, not the container user, is the power.
|
|
# Access is gated by the panel's bcrypt-authenticated session on every route.
|
|
DS-0002
|