docker-alpine icon indicating copy to clipboard operation
docker-alpine copied to clipboard

Is it possible to ship Alpine Images without the netcat binary ?

Open dibsy opened this issue 1 year ago • 0 comments

Alpine Images are packed with a netcat binary installed at /usr/bin/nc While netcat do have legitimate use cases but they are often being exploited by the hackers specially abusing the -e parameter support that helps them to execute programs and do stuffs like getting reverse shells,etc.

Ubuntu on the other hand uses netcat which dropped the features provided by -e. Also Ubuntu Images does not provide the netcat binary in their images.

So talking about making the images more smaller and making it little more secure, is it possible to drop the netcat binaries from the list of pre installed packages in Alpine ?

dibsy avatar Aug 04 '22 20:08 dibsy