this repo has no description smallweb.run
smallweb
4
fork

Configure Feed

Select the types of activity you want to include in your feed.

remove authorized_keys from DenoArgs read permissions

pomdtr 8b4fa68d 957bb857

+3 -4
+3 -4
worker/worker.go
··· 124 124 args = append(args, "--config", configPath) 125 125 } 126 126 127 - authorizedKeysPath := filepath.Join(me.RootDir, ".smallweb", "authorized_keys") 128 127 npmCache := filepath.Join(xdg.CacheHome, "smallweb", "deno", "npm", "registry.npmjs.org") 129 128 if a.Admin { 130 129 args = append( 131 130 args, 132 - fmt.Sprintf("--allow-read=%s,%s,%s,%s,%s", me.RootDir, sandboxPath, deno, npmCache, authorizedKeysPath), 131 + fmt.Sprintf("--allow-read=%s,%s,%s,%s", me.RootDir, sandboxPath, deno, npmCache), 133 132 fmt.Sprintf("--allow-write=%s", me.RootDir), 134 133 ) 135 134 ··· 141 140 if fi, err := os.Lstat(appRoot); err == nil && fi.Mode()&os.ModeSymlink == 0 { 142 141 args = append( 143 142 args, 144 - fmt.Sprintf("--allow-read=%s,%s,%s,%s,%s", appRoot, sandboxPath, deno, npmCache, authorizedKeysPath), 143 + fmt.Sprintf("--allow-read=%s,%s,%s,%s", appRoot, sandboxPath, deno, npmCache), 145 144 fmt.Sprintf("--allow-write=%s", filepath.Join(appRoot, "data")), 146 145 ) 147 146 ··· 159 158 160 159 args = append( 161 160 args, 162 - fmt.Sprintf("--allow-read=%s,%s,%s,%s,%s,%s", appRoot, target, sandboxPath, deno, npmCache, authorizedKeysPath), 161 + fmt.Sprintf("--allow-read=%s,%s,%s,%s,%s", appRoot, target, sandboxPath, deno, npmCache), 163 162 fmt.Sprintf("--allow-write=%s,%s", filepath.Join(appRoot, "data"), filepath.Join(target, "data")), 164 163 ) 165 164 return args