Disallow the modification of conda packages

prabhjyotsingh · Aug 17, 2020 · 9ffb77c · 9ffb77c
1 parent 336ffd7
commit 9ffb77c
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/scripts/docker/zeppelin-interpreter/Dockerfile b/scripts/docker/zeppelin-interpreter/Dockerfile
@@ -68,9 +68,9 @@ RUN set -ex && \
     # Cleanup based on https://github.com/ContinuumIO/docker-images/commit/cac3352bf21a26fa0b97925b578fb24a0fe8c383
     find /opt/conda/ -follow -type f -name '*.a' -delete && \
     find /opt/conda/ -follow -type f -name '*.js.map' -delete && \
-    conda clean -ay && \
-    # Allow to modify conda packages
-    chmod -R ug+rwX /opt/conda
+    conda clean -ay
+    # Allow to modify conda packages. This allows malicious code to be injected into other interpreter sessions, therefore it is disabled by default
+    # chmod -R ug+rwX /opt/conda
 ENV PATH /opt/conda/bin:$PATH
 
 # Allow process to edit /etc/passwd, to create a user entry for zeppelin