remove authorized_keys from DenoArgs read permissions
+3
-4
+3
-4
worker/worker.go
+3
-4
worker/worker.go
···
124
124
args = append(args, "--config", configPath)
125
125
}
126
126
127
-
authorizedKeysPath := filepath.Join(me.RootDir, ".smallweb", "authorized_keys")
128
127
npmCache := filepath.Join(xdg.CacheHome, "smallweb", "deno", "npm", "registry.npmjs.org")
129
128
if a.Admin {
130
129
args = append(
131
130
args,
132
-
fmt.Sprintf("--allow-read=%s,%s,%s,%s,%s", me.RootDir, sandboxPath, deno, npmCache, authorizedKeysPath),
131
+
fmt.Sprintf("--allow-read=%s,%s,%s,%s", me.RootDir, sandboxPath, deno, npmCache),
133
132
fmt.Sprintf("--allow-write=%s", me.RootDir),
134
133
)
135
134
···
141
140
if fi, err := os.Lstat(appRoot); err == nil && fi.Mode()&os.ModeSymlink == 0 {
142
141
args = append(
143
142
args,
144
-
fmt.Sprintf("--allow-read=%s,%s,%s,%s,%s", appRoot, sandboxPath, deno, npmCache, authorizedKeysPath),
143
+
fmt.Sprintf("--allow-read=%s,%s,%s,%s", appRoot, sandboxPath, deno, npmCache),
145
144
fmt.Sprintf("--allow-write=%s", filepath.Join(appRoot, "data")),
146
145
)
147
146
···
159
158
160
159
args = append(
161
160
args,
162
-
fmt.Sprintf("--allow-read=%s,%s,%s,%s,%s,%s", appRoot, target, sandboxPath, deno, npmCache, authorizedKeysPath),
161
+
fmt.Sprintf("--allow-read=%s,%s,%s,%s,%s", appRoot, target, sandboxPath, deno, npmCache),
163
162
fmt.Sprintf("--allow-write=%s,%s", filepath.Join(appRoot, "data"), filepath.Join(target, "data")),
164
163
)
165
164
return args