JShellBot icon indicating copy to clipboard operation
JShellBot copied to clipboard

Take steps to prevent file access from Sandbox

Open ynvaser opened this issue 5 years ago • 2 comments

Previous issue: https://github.com/Together-Java/JShellBot/issues/15 Seems like it's not enough. I'd suggest running the app with a linux user that only has read/execute access to what it needs to.

ynvaser avatar Feb 15 '19 22:02 ynvaser

Letting it run with reduced rights is still beneficial, but it can not prevent the bot from reading it's own token. Though adding a safeguard that blocks all executed code from reading a file in the bot directory would be possible.

I-Al-Istannen avatar Feb 16 '19 09:02 I-Al-Istannen

Leaving a note to close and split this into another issue.

irufus avatar Mar 18 '19 17:03 irufus