diff options
| author | grunfink <grunfink@noreply.codeberg.org> | 2026-02-07 17:01:11 +0100 |
|---|---|---|
| committer | grunfink <grunfink@noreply.codeberg.org> | 2026-02-07 17:01:11 +0100 |
| commit | 313b72d3ace21627b7ddc9602004d5859b18d2ba (patch) | |
| tree | 14e602dcdede8cb282707e89c18c09dcf9f4b4a0 | |
| parent | 8a8d78980e938b577e429922a0ae3e822d098da0 (diff) | |
| parent | 110032fb486c4491edbfafd906f5784f36bd0f51 (diff) | |
Merge pull request 'snac(8): Words of caution for strip_exif configuration' (#549) from oxzi/snac2:strip-metadata-man-warning into master
Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/549
| -rw-r--r-- | doc/snac.8 | 11 |
1 files changed, 11 insertions, 0 deletions
@@ -310,6 +310,17 @@ If set to true, EXIF and other metadata will be stripped from uploaded images (j tools to be installed. If .Nm snac cannot find or execute these tools at startup, it will refuse to run. +.Pp +When enabled, registered users might pass arbitrary files to +.Nm mogrify +or +.Nm ffmpeg . +These commands are being executed outside the sandbox and have a huge +attack surface. Exploits would be run as the +.Nm +system user. Reconsider enabling this on +.Nm +instances with unknown or untrusted users. .It Ic mogrify_path Overrides the default "mogrify" command name or path. Use this if the tool is not in the system PATH or has a different name. .It Ic ffmpeg_path |