From b3b7221e96bc07d0971ee009eb711ecf4ce63dc7 Mon Sep 17 00:00:00 2001
From: orbisai-sec <kira@thesecurity.online>
Date: Thu, 9 Oct 2025 08:04:28 +0000
Subject: [PATCH] fix:
 yaml.docker-compose.security.no-new-privileges.no-new-privileges-docker-compose.override.yml

---
 docker-compose.override.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docker-compose.override.yml b/docker-compose.override.yml
index 4496ae18f..cdeefb0d0 100644
--- a/docker-compose.override.yml
+++ b/docker-compose.override.yml
@@ -12,6 +12,8 @@ services:
       - ./surfsense_web/.env
     depends_on:
       - backend
+    security_opt:
+      - no-new-privileges:true
     environment:
       - NEXT_PUBLIC_API_URL=${NEXT_PUBLIC_API_URL:-http://backend:8000}
 
@@ -25,6 +27,8 @@ services:
       - db
     env_file:
       - ./surfsense_backend/.env
+    security_opt:
+      - no-new-privileges:true
     environment:
       - DATABASE_URL=postgresql+asyncpg://${POSTGRES_USER:-postgres}:${POSTGRES_PASSWORD:-postgres}@db:5432/${POSTGRES_DB:-surfsense}
       - PYTHONPATH=/app