You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
it is an easy target for privilege escalation. Bad actors could easily use this to elevate permissions or harm otherwise protected systems
the behavior of scripts will be different on your deployment method. On Docker, you'll have a different file system than when you host using bare metal or Kubernetes.
we try to run Homarr with a low permissions as possible, reducing possible attack vectors. It may not have enough permissions to run certain command or scripts
changes in our base image could lead to broken scripts, since there are minor differences between distros and the binaries that are included with each base image
If we decide to implement this, I strongly recommend that it must be manually activated using an environment variable to explicitly warn users of the risk.
As a side note, you can already trigger Wake on LAN if you use HomeAssistant and the WOL integration.
I agree. It must be very secure if implemented. But it would be a feature more advanced users, like if they want to use homarr as like a dashboard which shows them all of their stats of their server and buttons to run quick acitons.
Describe the feature you'd like to request
A widget that will run a bash command when clicked.
Additional information
Could be used for stuff like powering off the machine, turning a machine on with wakeonlan or restarting docker containers.
Originally posted ajnart/homarr#1113
The text was updated successfully, but these errors were encountered: