From 3e0ec638c8c0e48428098bd8f3aed0f585db798e Mon Sep 17 00:00:00 2001
From: Youqing Han <youqing@tubi.tv>
Date: Wed, 30 Aug 2023 02:40:17 +0000
Subject: [PATCH] Fix the vulnerability for the local root user

---
 Dockerfile | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index 47c0b13..976890b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -87,6 +87,9 @@ COPY --from=fetcher /tmp/grpcurl /usr/local/bin/grpcurl
 # Installing fortio
 COPY --from=fetcher /tmp/fortio /usr/local/bin/fortio
 
+# Fix the local root user vulnerability issue
+RUN echo -e 'PasswordAuthentication no\nPermitEmptyPasswords no\nPermitRootLogin prohibit-password' >> /etc/ssh/sshd_config
+
 # Setting User and Home
 USER root
 WORKDIR /root