diff options
| author |   Trevor Bramwell <tbramwell@linuxfoundation.org> | 2017-06-21 11:26:43 -0700 |
|---|---|---|
| committer | Trevor Bramwell <tbramwell@linuxfoundation.org> | 2017-06-22 09:32:43 -0700 |
| commit | 83557fd9970eb89129a5ee93e4ce36c9dff51bf6 (patch) | |
| tree | c7116b0282a4b1e8d9d73dfee99c94637ff6c8d4 /template_exception.yaml | |
| parent | 7f69464d9e184b69e5d6fb70517e48f43d4c56c0 (diff) | |
Run Anteater under Docker as Non-Root User
Instead of violating the priciple of least privilage, anteater should
be ran by a non-root user.
Anteater doesn't need access to anything owned by root to perform
security scanning, and running as a non-root user should prevent it from
creating file owned by root in the future.
JIRA: RELENG-238
Change-Id: I7b75255ff460444763acbcc5d7752e1223860a2b
Signed-off-by: Trevor Bramwell <tbramwell@linuxfoundation.org>
Diffstat (limited to 'template_exception.yaml')
0 files changed, 0 insertions, 0 deletions