Merge pull request #3377 from nextcloud/enh/noid/drop-net-raw

2026-05-28 14:30:13 +00:00 · 2023-09-27 13:06:38 +02:00
parent 3e25acce24 bcced0b176
commit 8e4678fe82
1 changed files with 3 additions and 0 deletions
--- a/php/src/Docker/DockerActionManager.php
+++ b/php/src/Docker/DockerActionManager.php
@@ -476,6 +476,9 @@ class DockerActionManager
            $requestBody['HostConfig']['CapAdd'] = $capAdds;
        }

+        // Disable arp spoofing
+        $requestBody['HostConfig']['CapDrop'] = ['NET_RAW'];
+
        if ($container->isApparmorUnconfined()) {
            $requestBody['HostConfig']['SecurityOpt'] = ["apparmor:unconfined"];
        }