Merge pull request #300 from isavcic/tmp-permissions-fix

Fix /tmp/modsecurity/* directories permissions so nginx workers can write to them
coreruleset · Nov 7, 2024 · f088c94 · f088c94
2 parents ac69620 + ab05e3f
commit f088c94
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/openresty/Dockerfile-alpine b/openresty/Dockerfile-alpine
@@ -236,8 +236,9 @@ RUN set -eux; \
     mkdir /var/log/nginx; \
     mkdir -p /tmp/modsecurity/data; \
     mkdir -p /tmp/modsecurity/upload; \
-    mkdir -p /tmp/modsecurity/tmp; \ 
+    mkdir -p /tmp/modsecurity/tmp; \
     mkdir -p /usr/local/modsecurity; \
+    chown -R nobody:nobody /tmp/modsecurity; \
     # Comment out the SecDisableBackendCompression option since it is not supported in V3
     sed -i 's/^\(SecDisableBackendCompression .*\)/# \1/' /usr/local/openresty/nginx/templates/modsecurity.d/modsecurity-override.conf.template; \
     ln -s /usr/local/modsecurity/lib/libmodsecurity.so.${MODSEC3_VERSION} /usr/local/modsecurity/lib/libmodsecurity.so.3.0; \