Remove stickybit

f9c7334e · WingKwan Lau · sean.melissari · 044a9141 · f9c7334e · f9c7334e
Commit f9c7334e authored Apr 15, 2021 by WingKwan Lau Committed by sean.melissari Apr 15, 2021
Expand all Show whitespace changes
Inline Side-by-side

Showing with 561 additions and 1 deletion

Dockerfile Dockerfile +3 -0

LICENSE LICENSE +551 -0

hardening_manifest.yaml hardening_manifest.yaml +7 -1

No files found.
--- a/Dockerfile
+++ b/Dockerfile
@@ -73,6 +73,9 @@ RUN useradd -u 1001 -r -g 0 -d ${HOME} -s /sbin/nologin \
    fix-permissions ${HOME} -P && \
    rpm-file-permissions

+# Remove sticky bit
+RUN chmod g-s /usr/libexec/openssh/ssh-keysign
+
 ENTRYPOINT ["/usr/bin/container-entrypoint"]
 USER 1001


--- a/LICENSE
+++ b/LICENSE
--- a/hardening_manifest.yaml
+++ b/hardening_manifest.yaml
@@ -54,6 +54,12 @@ resources:
    validation:
      type: "sha256" # supported: sha256, sha512
      value: "01b317c506f8b6ad60b11b1dc3f093276bb703281cb1ae01132752253ec706a2" # must be lowercase
+  - url: "http://www.rpmfind.net/linux/centos/8.3.2011/AppStream/x86_64/os/Packages/perl-5.30.1-451.module_el8.3.0+406+78614513.x86_64.rpm"
+    filename: "perl-5.30.1-451.module_el8.3.0+406+78614513.x86_64.rpm" 
+    validation:
+      type: "sha256" # supported: sha256, sha512
+      value: "5af6605a7cfb477a60132992e679a4b5502c71b4636e8839cdba5f8ec580f368" # must be lowercase
+


 # List of project maintainers