Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

建议:当Web服务发现自己以root用户运行时,给予管理员警告并(至少)禁用本机存储挂载 #7306

Open
2 of 4 tasks
stackinspector opened this issue Oct 8, 2024 · 3 comments
Labels
enhancement New feature or request

Comments

@stackinspector
Copy link

Please make sure of the following things

  • I have read the documentation.
  • I'm sure there are no duplicate issues or discussions.
  • I'm sure this feature is not implemented.
  • I'm sure it's a reasonable and popular requirement.

Description of the feature / 需求描述

(我个人认为任何有能力挂载根目录并提供公共访问的服务器软件都应该做到这一点。)人人都有犯错的可能(比如刚才把挂载到的虚拟路径和被挂载的本地路径搞反了然后被吓了一跳才意识到问题严重性的我),尤其是对于这类并不假定使用者非常精通技术的服务器软件,用户普遍的安全意识更可能薄弱。软件在人可能犯错的情况下提出警告,我认为是合理且有一定必要性的。
由于存在内网运行等有能力控制安全性的情况,可以允许管理员禁用警告,但必须让用户保证「知道自己在做什么」,并做免责声明。

Suggested solution / 实现思路

No response

Additional context / 附件

No response

@stackinspector stackinspector added the enhancement New feature or request label Oct 8, 2024
Copy link

welcome bot commented Oct 8, 2024

Thanks for opening your first issue here! Be sure to follow the issue template!

@hshpy
Copy link

hshpy commented Oct 9, 2024

跟服务器用户是不是root无关。
alist的管理员才有权限添加存储,这是个人问题。

@JsonSong89
Copy link

警告一下还行
禁用就没必要了吧
重要的服务器也不会拿来挂alist

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

3 participants