Merge pull request #638 from permitio/rk/prevent-git-symlink-bug

Dockerfile: Mitigate git exploit by disabling symlink support
permitio · Aug 7, 2024 · a3e7785 · a3e7785
2 parents d180532 + 607ed13
commit a3e7785
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/docker/Dockerfile b/docker/Dockerfile
@@ -143,6 +143,7 @@ USER opal
 FROM common AS server
 
 RUN apt-get update && apt-get install -y openssh-client git && apt-get clean
+RUN git config --global core.symlinks false # Mitigate CVE-2024-32002
 
 USER opal