On a Centos 7 host, some of my containers produce something like :
/var/lib/docker/volumes/–crazy_long_id–/_data
… in there are things like:
drwxrwxrwx 1 systemd-bus-proxy ssh_keys 94 Apr 14 19:10 .
drwxr-xr-x 1 root root 10 Apr 14 19:10 …
-rw-r–r-- 1 systemd-bus-proxy ssh_keys 220 Nov 12 2014 .bash_logout
-rw-r–r-- 1 systemd-bus-proxy ssh_keys 3515 Nov 12 2014 .bashrc
… the problem (maybe non-problem) is a separate security audit process I have running flags this as word writable with no sticky bit, which it indeed is. My question is, can I fix this situation or must I ignore my own warnings? What are the consequences of changing this on the host? Is there some way to maybe avoid this by manipulating the container itself?