BeerK0in / generator-gunbot

Setup and manage GUNBOT x3 on Linux.
MIT License
32 stars 20 forks source link

Run Gunbot as non-root user #17

Open BeerK0in opened 7 years ago

ghost commented 7 years ago

Hello there!

Sounds easy enough.

chmod 770 /opt/gunbot -R

ghost commented 7 years ago

Now stuck on loading coin after via YEAH! - Started GUNBOT for BTC_VIA. :)

BeerK0in commented 7 years ago

This will be fixed in the next major version. not sure when.

cryptowally commented 7 years ago

+1 for this. While I'm glad this got launched and made available to everyone quickly, and I suspect running everything as root made it a lot easier to do so, it's generally a very very bad security thing to be doing things as root. Plus, this is crypto. Plus, the way one installs this is downloading a script and piping to bash. All of that is generally frowned upon in the security industry. So, I'm glad it's on the list to be fixed.

That said, I've run this myself on my VPS boxes that are dedicated to gunbot. I trust beerK0in, and there's no additional security problems that this script would expose a user to that gunbot itself doesn't have.