All errors have documentation links

This commit is contained in:
Adam Outler
2025-10-31 22:24:31 +00:00
parent 1e63cec37c
commit 8edef9e852
24 changed files with 481 additions and 75 deletions

View File

@@ -0,0 +1,27 @@
# Read-Only Filesystem Mode
## Issue Description
The container is running as read-write instead of read-only mode. This reduces the security hardening of the appliance.
## Security Ramifications
Read-only root filesystem is a security best practice that prevents malicious modifications to the container's filesystem. Running read-write allows potential attackers to modify system files or persist malware within the container.
## Why You're Seeing This Issue
This occurs when the Docker configuration doesn't mount the root filesystem as read-only. The application is designed as a security appliance that should prevent filesystem modifications.
## How to Correct the Issue
Enable read-only mode:
- In docker-compose.yml, add: `read_only: true`
- For docker run, use: `--read-only`
- Ensure necessary directories are mounted as writable volumes (tmp, logs, etc.)
## Additional Resources
Docker Compose setup can be complex. We recommend starting with the default docker-compose.yml as a base and modifying it incrementally.
For detailed Docker Compose configuration guidance, see: [DOCKER_COMPOSE.md](https://github.com/jokob-sk/NetAlertX/blob/main/docs/DOCKER_COMPOSE.md)