kiwix / container-images

10 stars 4 forks source link

Prevent RW access from FTP in download folder #186

Closed rgaudin closed 3 years ago

rgaudin commented 3 years ago

PureFTPd image we use doesn't seem to (at least easily) turn off RW for anonymous users. Usage recommend to use filesystem's permissions for such use case.

As we want to prevent any accidental permission mistake to allow anonymous users to upload files on the server, mounting the whole /data/download volume read-only seems like a very safe option.