-
Notifications
You must be signed in to change notification settings - Fork 97
Closed
jeremydouglass/docker-nginx-basic-auth
#2Description
This package was identified by a security researcher as being a popular package and having a potential security vulnerability related to the recent Alpine CVE-2019-5021.
https://www.kennasecurity.com/20-of-the-1000-most-popular-docker-containers-have-no-root-password/
News discussion here:
The proposed fix is adding this line to the Dockerfile:
# make sure root login is disabled
RUN sed -i -e 's/^root::/root:!:/' /etc/shadow
Metadata
Metadata
Assignees
Labels
No labels