You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This is similar to the problem addressed by 8fa788b. The initscripts created by docker::run() are world readable/executable by default which exposes potentially sensitive env variables to any authenticated system user.
Setting their owner to "root:${docker::params::docker_group}" and mode to '0750' or '0640' depending on the type of file should resolve this problem. I am happy to submit a PR with these changes if you think that is an acceptable way to mitigate the problem.
The text was updated successfully, but these errors were encountered:
This is similar to the problem addressed by 8fa788b. The initscripts created by
docker::run()
are world readable/executable by default which exposes potentially sensitive env variables to any authenticated system user.Setting their
owner
to"root:${docker::params::docker_group}"
andmode
to'0750'
or'0640'
depending on the type of file should resolve this problem. I am happy to submit a PR with these changes if you think that is an acceptable way to mitigate the problem.The text was updated successfully, but these errors were encountered: