From 0b396e913776056c26c3f116e47ca6b69961774f Mon Sep 17 00:00:00 2001 From: Nick Sweeting Date: Tue, 16 Apr 2019 20:51:31 -0400 Subject: [PATCH] Updated Security Overview (markdown) --- Security-Overview.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Security-Overview.md b/Security-Overview.md index e67bb64..ccb65d9 100644 --- a/Security-Overview.md +++ b/Security-Overview.md @@ -25,6 +25,8 @@ If you want ArchiveBox to be less noisy and avoid leaking any URLs to 3rd-party ## Do not run as root + + Do not run ArchiveBox as root for a number of reasons: - Chrome will execute as root and fail to run because Chrome sandboxing is not supported as root for good reason (do not set `CHROME_SANDBOX=False` just to bypass that error!) - All dependencies will be run as root, if any of them have a vulnerability that's exploited by sites you're archiving you're opening yourself up to full system compromise