jjkiers/cloudron-box
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

doc: more security notes

Browse Source
This commit is contained in:
Girish Ramakrishnan
2017-04-06 13:51:12 -07:00
parent 1fbbe036ce
commit bd57ee9461
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docs/references/selfhosting.md
View File

@@ -406,6 +406,9 @@ This section lists various security measures in place to protect the Cloudron.
local files. We achieve this using Linux Containers.
* Apps run with a read-only rootfs preventing attacks where the application code can be tampered with.
* Apps can only connect to addons like databases, LDAP, email relay using authentication.
* Apps are run with an AppArmor profile that disables many system calls and restricts access to `proc`
and `sys` filesystems.
* Most apps are run as non-root user. In the future, we intend to implement user namespaces.
## Email