From f6532c6cd662c9a60d90a96782c923d69520c380 Mon Sep 17 00:00:00 2001
From: Jamie Finnigan <jfinnigan@hashicorp.com>
Date: Wed, 21 Sep 2022 16:27:58 -0700
Subject: [PATCH] tighten access to /boundary/config.hcl in container images
 (#2471)

---
 Dockerfile | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index 76afe3834..fc3199240 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -23,6 +23,7 @@ ADD bin/boundary /bin/boundary
 RUN mkdir /boundary/
 ADD .release/docker/config.hcl /boundary/config.hcl
 RUN chown -R boundary:boundary /boundary/
+RUN chmod -R 640 /boundary/*
 
 EXPOSE 9200 9201 9202
 VOLUME /boundary/
@@ -71,6 +72,7 @@ RUN set -eux && \
 COPY .release/docker/config.hcl /boundary/config.hcl
 
 RUN chown -R boundary:boundary /boundary/ 
+RUN chmod -R 640 /boundary/*
 
 EXPOSE 9200 9201 9202
 VOLUME /boundary/
@@ -114,6 +116,7 @@ COPY .release/docker/config.hcl /boundary/config.hcl
 COPY dist/$TARGETOS/$TARGETARCH/$BIN_NAME /bin/
 
 RUN chown -R ${NAME}:${NAME} /boundary
+RUN chmod -R 640 /boundary/*
 
 EXPOSE 9200 9201 9202
 VOLUME /boundary/