New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Scrutiny: cap_drop all breaks app #991

Open

VladFlorinIlie opened this issue Nov 21, 2024 · 1 comment · May be fixed by #992

Assignees

VladFlorinIlie commented Nov 21, 2024

By dropping all capabilities (besides "SYS_ADMIN" and "SYS_RAWIO"), the app cannot access the internal assets directory from /opt/scrutiny/web/

This causes the web page to miss various icons (check the following images):
Working:

Broken:

Adding at least the "CAP_DAC_READ_SEARCH" capability fixes it.

stavros-k self-assigned this

Contributor

stavros-k commented Nov 22, 2024

Thanks, weird that there was no logs about these.

stavros-k linked a pull request

that will close this issue

scrutiny: add caps #992

Open

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment