alpinelinux / docker-alpine

Official Alpine Linux Docker image. Win at minimalism!
MIT License
1.04k stars 261 forks source link

Is it possible to ship Alpine Images without the netcat binary ? #272

Open dibsy opened 1 year ago

dibsy commented 1 year ago

Alpine Images are packed with a netcat binary installed at /usr/bin/nc While netcat do have legitimate use cases but they are often being exploited by the hackers specially abusing the -e parameter support that helps them to execute programs and do stuffs like getting reverse shells,etc.

Ubuntu on the other hand uses netcat which dropped the features provided by -e. Also Ubuntu Images does not provide the netcat binary in their images.

So talking about making the images more smaller and making it little more secure, is it possible to drop the netcat binaries from the list of pre installed packages in Alpine ?