From a1e82f8e186ef114ceafd074d8ae349f994407c6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Germ=C3=A1n=20Mart=C3=ADn?= <github@gmartin.net>
Date: Fri, 17 Nov 2023 17:57:26 +0100
Subject: [PATCH] Remove sudo to disallow root permission

---
 Dockerfile              | 3 +++
 root/defaults/autostart | 2 +-
 root/defaults/menu.xml  | 2 +-
 3 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 345a72a..3401765 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -34,5 +34,8 @@ COPY root/ /
 EXPOSE 8080 8443
 VOLUME ["/config","/vaults"]
 
+# Remove sudo
+RUN rm /usr/bin/sudo
+
 # Define a healthcheck
 HEALTHCHECK CMD curl --fail http://localhost:8080/ || exit 1
diff --git a/root/defaults/autostart b/root/defaults/autostart
index e839bc9..31cd159 100644
--- a/root/defaults/autostart
+++ b/root/defaults/autostart
@@ -1 +1 @@
-sudo /usr/bin/obsidian --no-sandbox --no-xshm --disable-dev-shm-usage --disable-gpu --disable-software-rasterizer
+/usr/bin/obsidian --no-sandbox --no-xshm --disable-dev-shm-usage --disable-gpu --disable-software-rasterizer
diff --git a/root/defaults/menu.xml b/root/defaults/menu.xml
index 7038f78..cbea74a 100644
--- a/root/defaults/menu.xml
+++ b/root/defaults/menu.xml
@@ -3,7 +3,7 @@
     <menu id="root-menu" label="MENU">
         <item label="Obsidian" icon="/usr/share/icons/hicolor/48x48/apps/obsidian.png">
             <action name="Execute">
-                <command>sudo /usr/bin/obsidian --no-sandbox</command>
+                <command>/usr/bin/obsidian --no-sandbox</command>
             </action>
         </item>
         <item label="xterm" icon="/usr/share/pixmaps/xterm-color_48x48.xpm">