Skip to content

Remove group writable permissions from container images #1516

Closed

Description

@dkwon17

The user_setup script, which is used when building our Docker images, incorrectly configures the file permissions for /etc/passwd to be group-writable, which poses a potential security risk.

Since /etc/passwd is writable, a user in the group can potentially edit the /etc/passwd file.

Activity

  1. dkwon17 commented on Sep 30, 2025

    @dkwon17
    CollaboratorAuthor

    Fixed by #1499

  2. added this to the v0.37.x milestone on Sep 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions