AlistGo / AlistGo/alist

建议:当Web服务发现自己以root用户运行时,给予管理员警告并(至少)禁用本机存储挂载

Open
#7,306 3 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
50.2k
Forks
7.9k
Avg merge
7d 21h
Merged PRs (30d)
6

Description

### Please make sure of the following things

- [X] I have read the [documentation](https://alist.nn.ci).
- [ ] I'm sure there are no duplicate issues or discussions.
- [X] I'm sure this feature is not implemented.
- [ ] I'm sure it's a reasonable and popular requirement.

### Description of the feature / 需求描述

(我个人认为任何有能力挂载根目录并提供公共访问的服务器软件都应该做到这一点。)人人都有犯错的可能(比如刚才把挂载到的虚拟路径和被挂载的本地路径搞反了然后被吓了一跳才意识到问题严重性的我),尤其是对于这类并不假定使用者非常精通技术的服务器软件,用户普遍的安全意识更可能薄弱。软件在人可能犯错的情况下提出警告,我认为是合理且有一定必要性的。
由于存在内网运行等有能力控制安全性的情况,可以允许管理员禁用警告,但必须让用户保证「知道自己在做什么」,并做免责声明。

### Suggested solution / 实现思路

_No response_

### Additional context / 附件

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.