Potential problem with update-lxcs-cron.sh? #2227
Unanswered
thibaultmol
asked this question in
General
Replies: 2 comments 5 replies
-
Sure, download the |
Beta Was this translation helpful? Give feedback.
2 replies
-
I prioritize site security and place a high emphasis on ensuring the safety of source code repositories. While GitHub is generally recognized as a secure platform for hosting and managing code, I take meticulous steps to eliminate vulnerabilities in the access procedures. |
Beta Was this translation helpful? Give feedback.
3 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I want to be very clear: I don't want to cast doubt on the security of you @tteck
I'm just thinking about all the things that could happen. And one of those things is:
The LXC cron updater script makes it so that every time the cron job is run, it downloads the script from the github page.
My question is: isn't possible to just have that script local? IF SOMEHOW the github repo got compromised then this malicious script will be cron job downloaded on (potentially) a large amount of systems that use your scripts.
Again, just something I've been thinking about
Beta Was this translation helpful? Give feedback.
All reactions