19.4% ntawm 1000 Docker ntim saum toj kawg nkaus muaj tus lej zais hauv paus

Jerry Gamblin txiav txim siab los nrhiav seb qhov kev nthuav dav tshiab tau txheeb xyuas li cas teeb meem hauv Docker cov duab ntawm Alpine faib, cuam tshuam nrog kev qhia tus lej zais rau tus neeg siv hauv paus. Kev tshuaj xyuas ntau txhiab lub thawv nrov tshaj plaws los ntawm Docker Hub catalog tsom, dab tsi hauv 194 ntawm cov no (19.4%) ib lo lus zais khoob yog teem rau hauv paus yam tsis tau xauv tus account ("hauv paus:::0:::::" es tsis txhob "hauv paus:!::0::::").

Yog hais tias lub thawv siv cov duab ntxoov ntxoo thiab linux-pam pob, siv lub hauv paus tsis muaj lo lus zais nws tso cai rau nce koj cov cai hauv lub thawv yog tias koj tsis muaj cai nkag mus rau hauv lub thawv lossis tom qab siv qhov tsis zoo hauv qhov kev pabcuam uas tsis muaj cai khiav hauv lub thawv. Koj tseem tuaj yeem txuas mus rau lub thawv nrog cov cai hauv paus yog tias koj muaj kev nkag mus rau cov txheej txheem, i.e. muaj peev xwm txuas ntawm lub davhlau ya nyob twg mus rau TTY teev nyob rau hauv /etc/securetty list. Nkag mus nrog tus password dawb paug raug thaiv ntawm SSH.

Nrov tshaj plaws ntawm ntim nrog khoob hauv paus password yog cov microsoft/azure-cli, kylemanna/openvpn, governmentpaas/s3-resource, phpmyadmin/phpmyadmin, mesosphere/aws-cli и hashicorp / terraform, uas muaj ntau tshaj 10 lab downloads. Cov thawv ntim kuj tseem ceeb
govuk/gemstash-alpine (500 txhiab), monsantoco/logstash (5 lab),
avhost/docker-matrix-riot (1 lab),
azuresdk/azure-cli-python (5 lab)
и ciscocloud/haproxy-consul (1 lab). Yuav luag tag nrho cov ntim no yog raws li Alpine thiab tsis txhob siv cov duab ntxoov ntxoo thiab linux-pam pob. Qhov kev zam tsuas yog microsoft/azure-cli raws li Debian.

Tau qhov twg los: opennet.ru