diff --git a/Dockerfile b/Dockerfile index 3893b178e935f18129304c77c6da55a2655514b7..83942ae4debf6673bdb0220414062f9c6465e8d2 100644 --- a/Dockerfile +++ b/Dockerfile @@ -14,9 +14,15 @@ ENV HUB_DEFAULT_PWD=HubSecretPasswd RUN yum -y update \ && yum clean all + + #TO fix CCE-80935-0 -RUN yum -y install crypto-policies -RUN yum -y install gnutls-utils +#RUN yum -y install crypto-policies +#RUN yum -y install gnutls-utils + +# for https://access.redhat.com/security/cve/CVE-2021-23240 +RUN rm -rf /usr/libexec/sudo/sesh + ARG CODESONAR_PACKAGE=codesonar-5.4p0.20200911-x86_64-pc-linux.tar.gz COPY ["${CODESONAR_PACKAGE}", "/opt"] @@ -40,6 +46,13 @@ RUN rm -rf /opt/codesonar-5.4p0/third-party/postgresql-9.2 RUN rm -rf /opt/codesonar-5.4p0/third-party/postgresql-9.3 RUN rm -rf /opt/codesonar-5.4p0/third-party/postgresql-9.6 +RUN rm -rf /opt/codesonar-5.4p0/third-party/python/inst/lib/python2.7/test/*pem /opt/codesonar-5.4p0/third-party/python/instmt/lib/python2.7/test/*pem + + +RUN rm -rf /opt/codesonar-5.4p0/third-party/python/inst/lib/python2.7/site-packages/urllib3* /opt/codesonar-5.4p0/third-party/python/instmt/lib/python2.7/site-packages/urllib3* +RUN rm -rf /usr/lib/python3.6/site-packages/urllib3 + + RUN mkdir /home/codesonar/hub \ && chown codesonar.codesonar /home/codesonar/hub