Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(command) prevent commands run as root user #604

Merged
merged 1 commit into from
Feb 1, 2018

Conversation

aileen
Copy link
Member

@aileen aileen commented Feb 1, 2018

refs #47

  • adds a checkRootUser fn to our base command class, which prevents any command to be run as root
  • adds test

@coveralls
Copy link

coveralls commented Feb 1, 2018

Coverage Status

Coverage increased (+0.007%) to 98.576% when pulling fb9ac2a on AileenCGN:prevent-root-commands into 2fcce29 on TryGhost:master.

@acburdine acburdine mentioned this pull request Feb 1, 2018
18 tasks
refs TryGhost#47

- adds a `checkRootUser` fn to utils, which prevents any command to be run as `root` unless, it is set with the `allowRoot` property
- adds test
@acburdine acburdine merged commit 01481b0 into TryGhost:master Feb 1, 2018
kirrg001 pushed a commit to kirrg001/Ghost-CLI that referenced this pull request Feb 2, 2018
refs TryGhost#47

- adds a `checkRootUser` fn to utils, which prevents any command to be run as `root` unless, it is set with the `allowRoot` property
- adds test
@alikuru
Copy link

alikuru commented Feb 11, 2018

It would be great to have a switch that re-enable running as root.

@ErisDS
Copy link
Member

ErisDS commented Feb 12, 2018

Running as root has never been supported - our docs have always made this clear, however we have run into numerous issues with this advice being ignored and subsequently causing support & maintenance overhead for the project, including the DO one-click installer incorrectly using root.

Our goal is to keep Ghost-CLI maintainable for our small team (read more here). Therefore we are actively working to get users off of setups that cause support and maintenance overhead.

I saw on slack that you're wanting to run using pm2 - this will be supported using extensions. We will not be adding a flag for running as root.

@aileen aileen deleted the prevent-root-commands branch February 12, 2018 11:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants