erici/snacforge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request 'snac(8): Words of caution for strip_exif configuration' (#549) from oxzi/snac2:strip-metadata-man-warning into master

Browse Source 
Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/549
This commit is contained in:
grunfink
2026-02-07 17:01:11 +01:00
parent 8a8d78980e 110032fb48
commit 313b72d3ac
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/snac.8
+11
View File
@@ -310,6 +310,17 @@ If set to true, EXIF and other metadata will be stripped from uploaded images (j
tools to be installed. If
.Nm snac
cannot find or execute these tools at startup, it will refuse to run.
.Pp
When enabled, registered users might pass arbitrary files to
.Nm mogrify
or
.Nm ffmpeg .
These commands are being executed outside the sandbox and have a huge
attack surface. Exploits would be run as the
.Nm
system user. Reconsider enabling this on
.Nm
instances with unknown or untrusted users.
.It Ic mogrify_path
Overrides the default "mogrify" command name or path. Use this if the tool is not in the system PATH or has a different name.
.It Ic ffmpeg_path