AppFlowy-Docs icon indicating copy to clipboard operation
AppFlowy-Docs copied to clipboard

Explain why xhost is needed and address security concerns

Open gotjoshua opened this issue 2 years ago • 3 comments

The docker setup includes these two lines:

Step 3: Provide access of appflowy to X session xhost local:root

I've set up a fair number of docker apps, and haven't seen it before, so it raises a yellow flag.

seems harmless enough in this context but some more details about why its needed will be great.

gotjoshua avatar Feb 01 '22 16:02 gotjoshua

Hi @gotjoshua thanks for bringing that to our attention. I didn't write the Dockerfile, it was provided by a contributor. Honestly, it doesn't work on my system, so I can't really test it out for alternatives.

What do you suggest that we add to the documentation? In the future, when referring to the documentation, please use the Documentation repo You can actually clone the documentation repo and submit a PR with your text. Thanks!

MikeWallaceDev avatar Feb 02 '22 09:02 MikeWallaceDev

In the future, when referring to the documentation, please use the Documentation repo

isn't this issue in the docs repo? (confused)

i actually don't understand it enough to know what to write, thats why i asked...

gotjoshua avatar Feb 06 '22 18:02 gotjoshua

Oh geez, I'm sorry! Hahaha, my bad :-D

Well, I don't anything about it. The whole Dockerfile was a PR, and I didn't even know what xhost was. I looked into it through your links, and didn't see much to concern me. So that's why I asked you. :-)

Hopefully that Docker container won't be needed soon...

MikeWallaceDev avatar Feb 06 '22 19:02 MikeWallaceDev

Hi @gotjoshua , @PabloCastellano has made improvements based on the feedback. Can you check if your concern is resolved?

annieappflowy avatar Sep 05 '22 07:09 annieappflowy

Looks good to me!

gotjoshua avatar Sep 05 '22 09:09 gotjoshua

Thanks for confirming. Closing the issue now

annieappflowy avatar Sep 07 '22 06:09 annieappflowy