openframeworks / openframeworks/openFrameworks
Do not require to run Linux `install_depencencies.sh` scripts as root
Open
Nobody has claimed this yet.
- Dominant language
- C++
- Stars
- 10.4k
- Forks
- 2.6k
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 9
Description
For security reasons, I think that running whole script as root is highly dangerous, or at least, may seem like that for the user.
Consider running only particular commands inside the scripts (e.g. pacman) with sudo explicitly.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Inspect the Linux install_dependencies.sh scripts and identify which commands currently require the whole script to run as root, including package installation with pacman. Run the scripts as a non-root user and verify that only the necessary dependency-installation commands request sudo.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- linux, shell
- Domain
- build-system, devops, security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100