Run as non-root user about docker-jdownloader

[jiaz83]

JDownloader doesn't require root/admin priviliges to run. So yes, it should run as unpriviliged user when feasible.

The protocol/api of MyJDownloader are open source, as well as JDownloader itself. So anyone can analyse it, write own tools/clients and verify security/authentication/encryption. MyJDownloader uses end-to-end encryption. Your password has never left your computer. It uses AES for encryption, Hmac256 for authentication, session based tokens/keys and requestID for detecting replay attacks. Experimental RSA encryption also exists. It also supports direct-connections, the client/eg webinterface directly talks to your JDownloader instance and only session/notification stuff requires the server.

In case you want to know more about this, feel free to contact us either via [email protected] or in live chat (irc, freenode, #jdteam).

Best Regards,
jiaz, JDownloader core developer

[jaymoulin]

It's not just a "I don't believe JDownloader so don't run as root" but no process should run as root.

The fact that jdownloader is in a Docker container is a first attack surface reduce because you can already check I/O and no process can be accessed outside from this container.

BUT

You still have a point. This container should not run as root. A system of UID/GID is already implemented in Docker but I'm pretty sure I have something more to implement in the image to use it properly if I can remember.
I'm keeping this issue open until I have time to handle it or you can PR it.