The user_setup script, which is used when building our Docker images, incorrectly configures the file permissions for /etc/passwd to be group-writable, which poses a potential security risk.
Since /etc/passwd is writable, a user in the group can potentially edit the /etc/passwd file.
The user_setup script, which is used when building our Docker images, incorrectly configures the file permissions for /etc/passwd to be group-writable, which poses a potential security risk.
Since /etc/passwd is writable, a user in the group can potentially edit the /etc/passwd file.