{"id":34141,"date":"2019-10-31T21:56:37","date_gmt":"2019-10-31T18:56:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-19-populyarnejshih-docker-obrazov-net-parolya-dlya-root\/"},"modified":"2019-10-31T21:56:37","modified_gmt":"2019-10-31T18:56:37","slug":"v-19-populyarnejshih-docker-obrazov-net-parolya-dlya-root","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/v-19-populyarnejshih-docker-obrazov-net-parolya-dlya-root","title":{"rendered":"N\u00eb 19% t\u00eb imazheve m\u00eb t\u00eb njohura Docker nuk ka fjal\u00ebkalim p\u00ebr root","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

T\u00eb shtun\u00ebn e kaluar, m\u00eb 18 maj, Jerry Gamblin nga Kenna Security kontrolloi<\/a><\/noindex> 1000 imazhe m\u00eb t\u00eb njohura nga Docker Hub p\u00ebr fjal\u00ebkalimin e p\u00ebrdoruesit root. N\u00eb 19% t\u00eb rasteve, ai rezultoi t\u00eb ishte bosh.<\/p>\n

\"N\u00eb<\/a><\/noindex><\/p>\n

Historiku me Alpine<\/h2>\n

\nShkaku i hulumtimit t\u00eb zhvilluar ishte Raporti i D\u00ebmtimit t\u00eb Talos (TALOS-2019-0782<\/a><\/noindex>), autor\u00ebt e t\u00eb cilit \u2014 fal zbulimit t\u00eb Peter Adkins nga Cisco Umbrella \u2014 njoftuan se imazhet Docker me distribucionin e njohur p\u00ebr kontejner\u00ebt Alpine nuk kan\u00eb fjal\u00ebkalim p\u00ebr root:<\/p>\n

\"Versionet zyrtare t\u00eb imazheve Docker t\u00eb Alpine Linux (nga v3.3 e tutje) p\u00ebrmbajn\u00eb fjal\u00ebkalimin NULL p\u00ebr p\u00ebrdoruesin root. Kjo dob\u00ebsi u shfaq si rezultat i regresionit t\u00eb paraqitur n\u00eb dhjetor 2015. Ajo ka t\u00eb b\u00ebj\u00eb me faktin se sistemet e zbatuara me versione problematike t\u00eb Alpine Linux n\u00eb kontejner dhe q\u00eb p\u00ebrdorin Linux PAM ose nj\u00eb mekaniz\u00ebm tjet\u00ebr, q\u00eb p\u00ebrfshin skedarin sistemor shadow si baz\u00eb p\u00ebr autentifikimin, mund t\u00eb pranojn\u00eb fjal\u00ebkalimin null (NULL) p\u00ebr p\u00ebrdoruesin root.\"<\/p><\/blockquote>\n

\nVersionet e imazheve Docker me Alpine t\u00eb verifikuara p\u00ebr problemin ishin nga 3.3 deri n\u00eb 3.9 p\u00ebrfshir\u00eb, si dhe l\u00ebshimi m\u00eb i fundit edge.<\/p>\n

Autor\u00ebt jepnin rekomandimin e m\u00ebposht\u00ebm p\u00ebr p\u00ebrdoruesit e prekur nga problemi:<\/p>\n

\"Llogaria root duhet t\u00eb \u00e7aktivizohet qart\u00eb n\u00eb imazhet Docker t\u00eb nd\u00ebrtuara mbi versionet problematike t\u00eb Alpine. Shfryt\u00ebzimi i mundsh\u00ebm i dob\u00ebsis\u00eb varet nga mjedisi, pasi suksesi i saj k\u00ebrkon nj\u00eb sh\u00ebrbim ose aplikacion t\u00eb ekspozuar jasht\u00eb, q\u00eb p\u00ebrdor Linux PAM ose nj\u00eb mekaniz\u00ebm tjet\u00ebr t\u00eb ngjash\u00ebm.\"<\/p><\/blockquote>\n

\nnj\u00eb rrjedhje rrug\u00ebsh p\u00ebrmes BGP, gjat\u00eb s\u00eb cil\u00ebs rreth 20 mij\u00eb prefiks t\u00eb 2400 rrjet\u00ebve u ridrejtuan n\u00eb m\u00ebnyr\u00eb t\u00eb gabuar. Burimi i rrjedhjes ishte ofruesi DQE Communications, i cili p\u00ebrdori software \u00ebsht\u00eb eliminuar<\/a><\/noindex> n\u00eb Alpine versionet 3.6.5, 3.7.3, 3.8.4, 3.9.2 dhe edge (snapshot 20190228), dhe t\u00eb pronar\u00ebve t\u00eb imazheve t\u00eb prekura u propozua t\u00eb komentojn\u00eb linj\u00ebn me root n\u00eb \/etc\/shadow<\/code> ose t\u00eb sigurohen q\u00eb nuk ekziston paketa linux-pam<\/code>.<\/p>\n

Vazhdimi nga Docker Hub<\/h2>\n

\nJerry Gamblin vendosi t\u00eb hulumtoj\u00eb \"sa e p\u00ebrhapur mund t\u00eb jet\u00eb praktika e p\u00ebrdorimit t\u00eb fjal\u00ebkalimeve null n\u00eb kontejner\u00eb\". P\u00ebr k\u00ebt\u00eb ai shkroi nj\u00eb t\u00eb vog\u00ebl Skripti Bash<\/a><\/noindex>, thelbi i t\u00eb cilit \u00ebsht\u00eb mjaft i thjesht\u00eb:<\/p>\n