{"id":34143,"date":"2019-10-31T21:56:37","date_gmt":"2019-10-31T18:56:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/19-4-iz-1000-samyh-populyarnyh-kontejnerov-docker-soderzhat-pustoj-parol-root\/"},"modified":"2019-10-31T21:56:37","modified_gmt":"2019-10-31T18:56:37","slug":"19-4-iz-1000-samyh-populyarnyh-kontejnerov-docker-soderzhat-pustoj-parol-root","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/19-4-iz-1000-samyh-populyarnyh-kontejnerov-docker-soderzhat-pustoj-parol-root","title":{"rendered":"19.4% 1000 k\u00f5ige populaarsemast Docker konteinerist sisaldavad t\u00fchja root parooli","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Jerry Gamblin otsustas v\u00e4lja selgitada, kui levinud on hiljuti avastatud probleem<\/a><\/noindex> Alpine'i jaotuse Docker-piltides, mis on seotud root-kasutaja t\u00fchi parool. Tuhande k\u00f5ige populaarsema konteineri anal\u00fc\u00fcs Docker Hubi kataloogist n\u00e4itas<\/a><\/noindex>, mis 194<\/a><\/noindex> neist (19,4%) on rootil m\u00e4\u00e4ratud t\u00fchi parool ilma konto lukustamiseta («root:::0:::::» asemel «root:!::0:::::»).<\/p>\n

Kui konteineris kasutatakse pakette shadow ja linux-pam, v\u00f5ib t\u00fchi root-parool kaugelt sulgeda vahekaarte, mis on avatud teistel seadmetel.<\/a><\/noindex> kuna on olemas privileegide t\u00f5stmise v\u00f5imalus konteineris, kui seal on ebaproduktiivne juurdep\u00e4\u00e4s v\u00f5i p\u00e4rast turvaprobleemi \u00e4rakasutamist ebaproduktiivses teenuses, mis t\u00f6\u00f6tab konteineris. Samuti on v\u00f5imalik konteineri juurdep\u00e4\u00e4s root \u00f5igustega, kui on juurdep\u00e4\u00e4s infrastruktuurile, s.t. v\u00f5imalus terminaliga TTY-le, mis on loetletud \/etc\/securetty. SSH kaudu on t\u00fchi parool blokkeeritud.<\/p>\n

K\u00f5ige populaarsemad konteinerid, millel on t\u00fchi root-parool<\/a><\/noindex> terminid \u00abprimary\/secondary\u00bb. microsoft\/azure-cli<\/a><\/noindex>, kylemanna\/openvpn<\/a><\/noindex>, governmentpaas\/s3-resource<\/a><\/noindex>, phpmyadmin\/phpmyadmin<\/a><\/noindex>, mesosphere\/aws-cli<\/a><\/noindex> ja hashicorp\/terraform<\/a><\/noindex>, mis on saanud \u00fcle 10 miljoni allalaadimise. Samuti on v\u00e4lja toodud konteinerid
\ngovuk\/gemstash-alpine<\/a><\/noindex> (500 tuhat), monsantoco\/logstash<\/a><\/noindex> (5 miljonit),
\navhost\/docker-matrix-riot<\/a><\/noindex> (1 miljon),
\nazuresdk\/azure-cli-python<\/a><\/noindex> (5 miljonit)
\nja ciscocloud\/haproxy-consul<\/a><\/noindex> (1 miljon). Peaaegu k\u00f5ik need konteinerid p\u00f5hinevad Alpine'il ja ei kasuta pakette shadow ja linux-pam. Erandiks on ainult microsoft\/azure-cli, mis p\u00f5hineb Debianil.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0436\u0435\u0440\u0440\u0438 \u0413\u0430\u043c\u0431\u043b\u0438\u043d (Jerry Gamblin) \u0440\u0435\u0448\u0438\u043b \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Docker-\u043e\u0431\u0440\u0430\u0437\u0430\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Alpine, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c \u043f\u0443\u0441\u0442\u043e\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root. \u0410\u043d\u0430\u043b\u0438\u0437 \u0442\u044b\u0441\u044f\u0447\u0438 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 Docker Hub \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0432 194 \u0438\u0437 \u043d\u0438\u0445 (19.4%) \u0434\u043b\u044f root \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043f\u0443\u0441\u0442\u043e\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0431\u0435\u0437 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 («root:::0:::::» \u0432\u043c\u0435\u0441\u0442\u043e «root:!::0:::::»). \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-34143","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4719,4% 1000 k\u00f5ige populaarsemast Docker-konteinerist sisaldab t\u00fchja root-parooli | ProHoster","description":"Jerry Gamblin otsustas v\u00e4lja selgitada, kui levinud on hiljuti avastatud probleem Docker-piltides.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/19-4-iz-1000-samyh-populyarnyh-kontejnerov-docker-soderzhat-pustoj-parol-root","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4719.4% \u0438\u0437 1000 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 Docker \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043f\u0443\u0441\u0442\u043e\u0439 \u043f\u0430\u0440\u043e\u043b\u044c root | ProHoster","og:description":"\u0414\u0436\u0435\u0440\u0440\u0438 \u0413\u0430\u043c\u0431\u043b\u0438\u043d (Jerry Gamblin) \u0440\u0435\u0448\u0438\u043b \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Docker-\u043e\u0431\u0440\u0430\u0437\u0430\u0445.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/19-4-iz-1000-samyh-populyarnyh-kontejnerov-docker-soderzhat-pustoj-parol-root","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:56:37+00:00","article:modified_time":"2019-10-31T18:56:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34143","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 18:05:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:13:07","updated":"2026-01-21 18:05:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34143","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=34143"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34143\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=34143"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=34143"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=34143"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}