diff --git a/Security-Overview.md b/Security-Overview.md index e67bb64..ccb65d9 100644 --- a/Security-Overview.md +++ b/Security-Overview.md @@ -25,6 +25,8 @@ If you want ArchiveBox to be less noisy and avoid leaking any URLs to 3rd-party ## Do not run as root + + Do not run ArchiveBox as root for a number of reasons: - Chrome will execute as root and fail to run because Chrome sandboxing is not supported as root for good reason (do not set `CHROME_SANDBOX=False` just to bypass that error!) - All dependencies will be run as root, if any of them have a vulnerability that's exploited by sites you're archiving you're opening yourself up to full system compromise