Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

delete nc cmd in image #2148

Merged
merged 1 commit into from
Dec 12, 2022
Merged

delete nc cmd in image #2148

merged 1 commit into from
Dec 12, 2022

Conversation

hongzhen-ma
Copy link
Collaborator

What type of this PR

  • Bug fixes

Which issue(s) this PR fixes:

Fixes #(issue-number)

@@ -9,6 +9,9 @@ COPY grace_stop_ovn_controller /usr/share/ovn/scripts/grace_stop_ovn_controller

WORKDIR /kube-ovn

RUN rm -f /usr/bin/nc &&\
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we should remove ncat from base

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes. The nc cmd is installed in nmap packet, so I delete the nmap packet in the last PR #2141
But the nc cmd still exists because the ncat is installed in dockerfile.base.

The jira about security only reports cmd about nc and netcat, both are soft link from ncat.
image

So if we can keep ncat and delete the soft link cmd? It will be convennient if we want to use nc in the pod.
Or It's better to delete ncat totally?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ok

@hongzhen-ma hongzhen-ma merged commit c627468 into master Dec 12, 2022
@hongzhen-ma hongzhen-ma deleted the nonroot branch December 12, 2022 05:59
hongzhen-ma added a commit that referenced this pull request Dec 12, 2022
hongzhen-ma added a commit that referenced this pull request Dec 12, 2022
@hongzhen-ma
Copy link
Collaborator Author

已回合 release-1.10 和 release-1.9 分支

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants