claudiupapasteri / cpapasteri.github.io Goto Github PK

I came for and enjoyed your blog post about setting up the nginx proxy manager with certs!
Though when I was looking at some other posts of yours, I saw a small security issue. Since you are checking explicitly for docker group membership and setting the owner/group for the docker socket, I think you made the permissions too broadly (sudo chmod 666 /var/run/docker.sock). This would allow rw permissions for all users, not just root and docker.