rexypoo / docker-entrypoint-helper Goto Github PK

Whenever $USER has started with a UID that's valid for the host it could cause unintended change of owner on volumes.

A user could abuse this feature to revoke file permissions to another user, could disown their own files with an improper invocation, or change system files to the wrong owner.

The script should check if the UID and GID are ourside normal values, and refuse to change ownership if not.

The 'docker' user, if created, should also be given a high UID/GID.