Skip to content

Commit f6381d3

Browse files
authored
fix: Ensure DMS config volume can be accessed by non-root users (docker-mailserver#4487)
1 parent 61c9b21 commit f6381d3

2 files changed

Lines changed: 11 additions & 0 deletions

File tree

CHANGELOG.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,11 @@ All notable changes to this project will be documented in this file. The format
1313
- **Internal:**
1414
- [`DMS_CONFIG_POLL`](https://docker-mailserver.github.io/docker-mailserver/v15.0/config/environment/#dms_config_poll) supports adjusting the polling rate (seconds) for the change detection service `check-for-changes.sh` ([#4450](https://github.com/docker-mailserver/docker-mailserver/pull/4450))
1515

16+
### Fixes
17+
18+
- **Internal:**
19+
- The DMS _Config Volume_ (`/tmp/docker-mailserver`) will now ensure it's file tree is accessible for services when the volume was created with missing executable bit ([#4487](https://github.com/docker-mailserver/docker-mailserver/pull/4487))
20+
1621
### Updates
1722

1823
- **Documentation:**

target/scripts/startup/setup-stack.sh

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -104,6 +104,12 @@ function _setup_directory_and_file_permissions() {
104104
chown -R _rspamd:_rspamd "${RSPAMD_DMS_DKIM_D}"
105105
fi
106106

107+
# Parent directories must have the executable bit set to descend the file tree for access,
108+
# as each service in the container running as a non-root user requires this to access any subpath,
109+
# `/tmp/docker-mailserver` must allow all users `+x` (notably required for `_rspamd` user read access):
110+
local DMS_CONFIG_DIR=/tmp/docker-mailserver
111+
chmod +x "${DMS_CONFIG_DIR}"
112+
107113
__log_fixes
108114
}
109115

0 commit comments

Comments
 (0)