Mikaela/Limnoria-doc
1
0
Fork 0
mirror of https://github.com/Mikaela/Limnoria-doc.git synced 2025-01-12 13:42:32 +01:00
Code Issues Projects Releases Wiki Activity

use/security: Document owner-less setup.

Browse Source
This commit is contained in:
Valentin Lorentz 2021-04-10 16:21:07 +02:00
parent e00596feb0
commit f1e719a82d
1 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
use/security.rst
View File

@ -19,7 +19,7 @@ Trust in network operators
==========================
As you may know, by default, it is possible to do anything from IRC, including
loading the Unix plugin and using the `@call` command.
loading the Unix plugin and using the ``@call`` command.
The only safeguard is checking the user calling the commands is authenticated
as the owner of the bot; and network operators are able to spoof hostmasks
and collect your password, thus allowing them to execute commands as the
@ -31,10 +31,18 @@ do that, you should be aware of that risk.
Starting on commit `4f6a5e7db`_ (version 2017.10.01), there is a new
configuration variable, `supybot.commands.allowShell`, to prevent malicious
network operators from getting shell access on your bot's computer.
It defaults to `True` to make it easy for new users to install plugins using
PluginDownloader, but it is recommended you set it to `False` if you do not
It defaults to ``True`` to make it easy for new users to install plugins using
PluginDownloader, but it is recommended you set it to ``False`` if you do not
care about that feature.
Finally, you can remove the ``owner`` user account entirely
(or remove the ``owner`` capability) for that account.
This causes every privileged commands to be disabled, so neither you
nor server operators can access it.
Channel-specific configuration variables can still be configured by
users with the ``#channel,op`` capability (if any), but global configuration
variables can only be modified by accessing the config files.
.. _4f6a5e7db: https://github.com/ProgVal/Limnoria/commit/4f6a5e7db