fix: restrict sudoers file

containerbase · Nov 30, 2023 · fd5775a · fd5775a
1 parent 80ca6df
commit fd5775a
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -44,7 +44,11 @@ RUN set -ex; \
   true
 
 # allow sudo without password
-RUN echo "$USER_NAME ALL=NOPASSWD:ALL" > /etc/sudoers.d/$USER_NAME; sudo id
+RUN set e; \
+  echo "$USER_NAME ALL = NOPASSWD: ALL" > /etc/sudoers.d/$USER_NAME; \
+  chmod 0440 /etc/sudoers.d/$USERNAME; \
+  sudo id; \
+  true
 
 # renovate: datasource=github-tags packageName=git/git
 RUN install-tool git v2.43.0