Dimas D. Angga c6748dc450 fix(mastercontainer): run session-deduplicator as www-data ...

The session-deduplicator only touches files under /mnt/docker-aio-config/session/, which is already owned by www-data, so running it as root grants more privilege than it needs. Dropping to www-data reduces the number of root-owned processes in the mastercontainer and follows least-privilege for the supervisord program set.

2026-05-20 09:32:49 +07:00

1.6 KiB

Raw Permalink Blame History

View Raw