piserver icon indicating copy to clipboard operation
piserver copied to clipboard

config PISERVER_DATADIR to decide other location

Open marcco134 opened this issue 3 years ago • 1 comments

I saw in config.h that there is already the idea of defining "PISERVER_DATADIR" but I think it's not already finished. (finding very often hard-coded "/var/lib/piserver". It would be great to have this feature realized because it could improve security aspects by moving all data's to a crypted place (device, folder, img ...)

I'm also wondering why my work-around does not work:

mount -o bind /mnt/crypt/piserver/ /var/lib/piserver/ or even mount -o bind /mnt/crypt/var/ /var/

pi's don't start

marcco134 avatar Feb 28 '22 17:02 marcco134

Not sure what security problems you are trying to solve.

  • The operating system files that live under /var/lib/piserver/os are shared publicly (read-only) to everyone on the network, without any authentication whatsoever. Not sure what the point is in encrypting the files you share publicly. :-)

Private information like the LDAP authentication database, as well as user's home directories live outside /var/lib/piserver...

maxnet avatar Feb 28 '22 21:02 maxnet