Currently, bashellite is required to run as root since it has the ability to create arbitrary mirror directories anyway in the file system. It also requires access to update it's own config files, and the ability to create it's own log directory.
Proposed fix for this is to remove the requirement for root access by creating a makefile and/or install script that drops bashellite into /usr/local/bin, drops configs in /etc/bashellite, and creates /var/log/bashellite. chowning the log dir to be owned by a bashellite user will allow for the writing of logs. Configs should remain static since it is a huge security risk to allow the script to write it's own input.
codrcodz
commented
6 years ago
Currently, bashellite is required to run as root since it has the ability to create arbitrary mirror directories anyway in the file system. It also requires access to update it's own config files, and the ability to create it's own log directory.
Proposed fix for this is to remove the requirement for root access by creating a makefile and/or install script that drops bashellite into /usr/local/bin, drops configs in /etc/bashellite, and creates /var/log/bashellite. chowning the log dir to be owned by a bashellite user will allow for the writing of logs. Configs should remain static since it is a huge security risk to allow the script to write it's own input.