Skip to content

Commit

Permalink
Disable Root Running
Browse files Browse the repository at this point in the history
Stop the server running as root user
  • Loading branch information
MrFishCakes committed Aug 28, 2023
1 parent 18aaac7 commit 7b5e96b
Showing 1 changed file with 39 additions and 0 deletions.
39 changes: 39 additions & 0 deletions patches/server/0011-Disable-Root-Running.patch
Original file line number Diff line number Diff line change
@@ -0,0 +1,39 @@
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
From: MrFishCakes <[email protected]>
Date: Mon, 28 Aug 2023 20:24:45 +0100
Subject: [PATCH] Disable Root Running

Stop the server running as root user

diff --git a/src/main/java/net/minecraft/server/dedicated/DedicatedServer.java b/src/main/java/net/minecraft/server/dedicated/DedicatedServer.java
index a4690357bec1e88d5c3c1a0112c64f0f32fa25e3..531b069e7d7147e273a22a9f6dd81c0c10ad31a2 100644
--- a/src/main/java/net/minecraft/server/dedicated/DedicatedServer.java
+++ b/src/main/java/net/minecraft/server/dedicated/DedicatedServer.java
@@ -182,6 +182,15 @@ public class DedicatedServer extends MinecraftServer implements ServerInterface

// Paper start - detect running as root
if (io.papermc.paper.util.ServerEnvironment.userIsRootOrAdmin()) {
+ // Graphite start - Disable Running Root
+ if (org.graphitemc.graphite.configuration.GlobalConfiguration.get().serverOptions.serverSecurity.disableRootRunning) {
+ DedicatedServer.LOGGER.warn("****************************");
+ DedicatedServer.LOGGER.warn("YOU ARE RUNNING THIS SERVER AS AN ADMINISTRATIVE OR ROOT USER. THIS FEATURE IS DISABLED IN \"graphite-global.yml\".");
+ DedicatedServer.LOGGER.warn("THE SERVER WILL NOW BEGIN TO SHUTDOWN.");
+ DedicatedServer.LOGGER.warn("****************************");
+ return false;
+ }
+ // Graphite end - Disable Running Root
DedicatedServer.LOGGER.warn("****************************");
DedicatedServer.LOGGER.warn("YOU ARE RUNNING THIS SERVER AS AN ADMINISTRATIVE OR ROOT USER. THIS IS NOT ADVISED.");
DedicatedServer.LOGGER.warn("YOU ARE OPENING YOURSELF UP TO POTENTIAL RISKS WHEN DOING THIS.");
diff --git a/src/main/java/org/graphitemc/graphite/configuration/GlobalConfiguration.java b/src/main/java/org/graphitemc/graphite/configuration/GlobalConfiguration.java
index 3ca407a0aada4113c8d8bb9389217f3cf6ba3795..73a49e030c2c6f5e53502deffd58a7f481235aa2 100644
--- a/src/main/java/org/graphitemc/graphite/configuration/GlobalConfiguration.java
+++ b/src/main/java/org/graphitemc/graphite/configuration/GlobalConfiguration.java
@@ -36,6 +36,7 @@ public class GlobalConfiguration extends ConfigurationPart {
public class ServerSecurity {

public boolean disableChatReports = false;
+ public boolean disableRootRunning = true;

}
}

0 comments on commit 7b5e96b

Please sign in to comment.