From f87ec7af08e1e5f1a0b7c8ffb10fab8384e56efb Mon Sep 17 00:00:00 2001 From: wander Date: Sat, 7 Feb 2026 00:30:14 -0500 Subject: [PATCH] Security Fix: Bind ControlPort to 127.0.0.1 for host network mode --- assets/entrypoint.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/assets/entrypoint.sh b/assets/entrypoint.sh index d924a65..a8c41e0 100755 --- a/assets/entrypoint.sh +++ b/assets/entrypoint.sh @@ -72,7 +72,7 @@ if [ -n "$TOR_CONTROL_PASSWORD" ]; then exit 1 fi - echo "ControlPort 0.0.0.0:9051" >> "$TOR_CONFIG" + echo "ControlPort 127.0.0.1:9051" >> "$TOR_CONFIG" echo "HashedControlPassword $HASHED_PASSWORD" >> "$TOR_CONFIG" echo "Control Password set." else