[GH-ISSUE #121] File permissions and ownership #94

New issue

Closed

opened 2026-02-25 23:40:40 +03:00 by kerem · 1 comment

kerem commented

2026-02-25 23:40:40 +03:00

Owner

Originally created by @Nutomic on GitHub (Jun 5, 2020).
Original GitHub issue: https://github.com/HaschekSolutions/pictshare/issues/121

It looks like all pictshare images are world writable and executable. And they are owned by systemd-network for some reason. That looks extremely bad for security.

$ ls -la volumes/pictshare/
drwxrwxrwx    2 systemd-network systemd-journal   4096 Jun  3 19:57 008jwy.jpg

Originally created by @Nutomic on GitHub (Jun 5, 2020). Original GitHub issue: https://github.com/HaschekSolutions/pictshare/issues/121 It looks like all pictshare images are world writable and executable. And they are owned by `systemd-network` for some reason. That looks extremely bad for security. ``` $ ls -la volumes/pictshare/ drwxrwxrwx 2 systemd-network systemd-journal 4096 Jun 3 19:57 008jwy.jpg ```

kerem closed this issue

2026-02-25 23:40:40 +03:00

kerem commented

2026-02-25 23:40:40 +03:00

Author

Owner

@geek-at commented on GitHub (Jun 5, 2020):

it's not owned by systemd. The docker container doesn't even have systemd. What you are seeing as "systemd" is just what your computer names the group number (groups in linux are identified via numbers not names). The container is running it as "nginx"

confirm using: docker exec -it pictshare ls -al data/

But yes the permissions might be too open since I had many weeks of troubles with nginx and docker not being allowed to save to directories or read files. You're welcome to add pull request on the docker side of things because it seems to be over my head

@geek-at commented on GitHub (Jun 5, 2020): it's not owned by systemd. The docker container doesn't even have systemd. What you are seeing as "systemd" is just what your computer names the group number (groups in linux are identified via numbers not names). The container is running it as "nginx" confirm using: `docker exec -it pictshare ls -al data/` But yes the permissions might be too open since I had many weeks of troubles with nginx and docker not being allowed to save to directories or read files. You're welcome to add pull request on the docker side of things because it seems to be over my head

kerem referenced this issue

2026-02-27 12:43:41 +03:00

[GH-ISSUE #94] Front end? #378

kerem referenced this issue

2026-02-27 12:43:43 +03:00

[GH-ISSUE #94] Front end? #382

kerem referenced this issue

2026-02-27 12:43:48 +03:00

[GH-ISSUE #94] Front end? #384