Fix arbitrary user support by setting GHOST_CONTENT to 1777

tianon · tianon · commit 585880b8606f · 2020-10-26T10:44:08.000-07:00
diff --git a/2/alpine/Dockerfile b/2/alpine/Dockerfile
@@ -41,6 +41,7 @@ RUN set -eux; \
 	mv "$GHOST_CONTENT" "$GHOST_INSTALL/content.orig"; \
 	mkdir -p "$GHOST_CONTENT"; \
 	chown node:node "$GHOST_CONTENT"; \
+	chmod 1777 "$GHOST_CONTENT"; \
 	\
 # force install "sqlite3" manually since it's an optional dependency of "ghost"
 # (which means that if it fails to install, like on ARM/ppc64le/s390x, the failure will be silently ignored and thus turn into a runtime error instead)
diff --git a/2/debian/Dockerfile b/2/debian/Dockerfile
@@ -65,6 +65,7 @@ RUN set -eux; \
 	mv "$GHOST_CONTENT" "$GHOST_INSTALL/content.orig"; \
 	mkdir -p "$GHOST_CONTENT"; \
 	chown node:node "$GHOST_CONTENT"; \
+	chmod 1777 "$GHOST_CONTENT"; \
 	\
 # force install "sqlite3" manually since it's an optional dependency of "ghost"
 # (which means that if it fails to install, like on ARM/ppc64le/s390x, the failure will be silently ignored and thus turn into a runtime error instead)
diff --git a/3/alpine/Dockerfile b/3/alpine/Dockerfile
@@ -41,6 +41,7 @@ RUN set -eux; \
 	mv "$GHOST_CONTENT" "$GHOST_INSTALL/content.orig"; \
 	mkdir -p "$GHOST_CONTENT"; \
 	chown node:node "$GHOST_CONTENT"; \
+	chmod 1777 "$GHOST_CONTENT"; \
 	\
 # force install "sqlite3" manually since it's an optional dependency of "ghost"
 # (which means that if it fails to install, like on ARM/ppc64le/s390x, the failure will be silently ignored and thus turn into a runtime error instead)
diff --git a/3/debian/Dockerfile b/3/debian/Dockerfile
@@ -65,6 +65,7 @@ RUN set -eux; \
 	mv "$GHOST_CONTENT" "$GHOST_INSTALL/content.orig"; \
 	mkdir -p "$GHOST_CONTENT"; \
 	chown node:node "$GHOST_CONTENT"; \
+	chmod 1777 "$GHOST_CONTENT"; \
 	\
 # force install "sqlite3" manually since it's an optional dependency of "ghost"
 # (which means that if it fails to install, like on ARM/ppc64le/s390x, the failure will be silently ignored and thus turn into a runtime error instead)

Original file line number	Diff line number	Diff line change
`@@ -41,6 +41,7 @@ RUN set -eux; \`
`41`	`41`	`mv "$GHOST_CONTENT" "$GHOST_INSTALL/content.orig"; \`
`42`	`42`	`mkdir -p "$GHOST_CONTENT"; \`
`43`	`43`	`chown node:node "$GHOST_CONTENT"; \`
	`44`	`+ chmod 1777 "$GHOST_CONTENT"; \`
`44`	`45`	`\`
`45`	`46`	`# force install "sqlite3" manually since it's an optional dependency of "ghost"`
`46`	`47`	`# (which means that if it fails to install, like on ARM/ppc64le/s390x, the failure will be silently ignored and thus turn into a runtime error instead)`
Original file line number	Diff line number	Diff line change
`@@ -65,6 +65,7 @@ RUN set -eux; \`
`65`	`65`	`mv "$GHOST_CONTENT" "$GHOST_INSTALL/content.orig"; \`
`66`	`66`	`mkdir -p "$GHOST_CONTENT"; \`
`67`	`67`	`chown node:node "$GHOST_CONTENT"; \`
	`68`	`+ chmod 1777 "$GHOST_CONTENT"; \`
`68`	`69`	`\`
`69`	`70`	`# force install "sqlite3" manually since it's an optional dependency of "ghost"`
`70`	`71`	`# (which means that if it fails to install, like on ARM/ppc64le/s390x, the failure will be silently ignored and thus turn into a runtime error instead)`