feat: Add path protection mechanism to prevent deletion of system dir#11130
feat: Add path protection mechanism to prevent deletion of system dir#11130ssongliu merged 2 commits into1Panel-dev:dev-v2from
Conversation
…ystem directories
|
Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
What this PR does / why we need it?
由于1panel是root运行,而且没有保护机制,1panel的文件管理是可以直接删掉系统重要文件夹,手动rm -rf / 删库跑路的
etc dev 什么的直接都可以遍历删除,删除即炸机无法恢复。虽然大部分用户不会犯傻但是总得做点保护。
特地开了个虚拟机进行炸机测试,下图是直接用文件管理删 /etc 后的效果,其他大部分重要目录删完直接ssh或者命令都炸了,想截图都做不到

Summary of your change
添加保护机制,不允许对指定路径进行操作。

Please indicate you've done the following: