From 1ba9f6252e769516759801c51b7ea5ed9a0eacf8 Mon Sep 17 00:00:00 2001
From: Disassembler <disassembler@dasm.cz>
Date: Thu, 1 Feb 2018 11:54:17 +0100
Subject: [PATCH] Fix grsec attributes for GNU Health NodeJS

---
 gnuhealth/Dockerfile | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/gnuhealth/Dockerfile b/gnuhealth/Dockerfile
index af0871b..ec7b1b5 100644
--- a/gnuhealth/Dockerfile
+++ b/gnuhealth/Dockerfile
@@ -10,9 +10,17 @@ RUN \
  # Install runtime XML dependencies
  apk --no-cache add libxml2 libxslt
 
+RUN \
+ # Install NodeJS runtime
+ apk --no-cache add nodejs paxctl \
+ # Fix grsec attributes to loosen memory protection restrictions
+ && paxctl -cm /usr/bin/node \
+ # Cleanup
+ && apk --no-cache del paxctl
+
 RUN \
  # Install runtime dependencies
- apk --no-cache add bash coreutils libffi libjpeg-turbo libpq nodejs
+ apk --no-cache add bash coreutils libffi libjpeg-turbo libpq
 
 RUN \
  # Install build dependencies