You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
To disable administrative privileges check: ```ADMIN_PRIVILEGES_CHECK = 0```
124
+
By default administrative privileges check is disabled.
125
+
To enable administrative privileges check: ```ADMIN_PRIVILEGES_CHECK = 1```
126
+
If administrative privileges check is enabled and PEB is started with administrative privileges, a warning page is displayed and no scripts can be executed. Starting Linux superuser scripts is not possible in this scenario.
To enable Perl debugger interaction: ```PERL_DEBUGGER_INTERACTION = 1```
130
+
By default Perl debugger interaction is enabled.
131
+
To disable Perl debugger interaction: ```PERL_DEBUGGER_INTERACTION = 0```
132
+
If PEB is going to be compiled for end users and interaction with the Perl debugger is not needed or not wanted for security reasons, it can be turned off.
133
+
100
134
## Runtime Requirements
101
135
* Qt 5 libraries - their full Linux list can be found inside the ```start-peb.sh``` script,
102
136
* Perl 5 distribution - any Linux, Mac or Windows Perl distribution.
@@ -186,7 +220,7 @@ PEB is designed to run from any directory without setting anything beforehand an
186
220
If PEB is able to read ```{PEB_binary_directory}/resources/app/trusted-domains.json```, all domains listed in this file are considered trusted. Only the local pseudo-domain ```http://local-pseudodomain/``` is trusted if ```trusted-domains.json``` is missing. This setting should be used with care - see section [Security](#security).
187
221
***Log files:**
188
222
<aname="log-files"></a>
189
-
If log files are needed for debugging of PEB or a PEB-based application, they can easily be turned on by manually creating ```{PEB_binary_directory}/logs```. If this directory is found during application startup, the browser assumes that logging is required and a separate log file is created for every browser session following the naming convention: ```{application_name}-started-at-{four_digit_year}-{month}-{day}--{hour}-{minute}-{second}.log```. PEB will not create ```{PEB_binary_directory}/logs``` on its own and if this directory is missing, no logs will be written, which is the default behavior. Please note, that every requested link is logged and log files can grow rapidly. If disc space is an issue, writing log files can be turned off by simply removing or renaming ```{PEB_binary_directory}/logs```.
223
+
If log files are needed for debugging of PEB or a PEB-based application, they can easily be turned on by manually creating ```{PEB_binary_directory}/logs```. If this directory is found during application startup, the browser assumes that logging is required and a separate log file is created for every browser session following the naming convention: ```{application_name}-started-at-{four_digit_year}-{month}-{day}--{hour}-{minute}-{second}.log```. PEB will not create ```{PEB_binary_directory}/logs``` on its own and if this directory is missing, no logs will be written, which is the default behavior. Please note that every requested link is logged and log files can grow rapidly. If disc space is an issue, writing log files can be turned off by simply removing or renaming ```{PEB_binary_directory}/logs```.
190
224
191
225
**Settings based on JavaScript code:**
192
226
They have two functions:
@@ -290,9 +324,7 @@ They have two functions:
290
324
* Cross-site scripting is disabled for all web and local pages.
291
325
* Plugin support is disabled.
292
326
293
-
**Optional security features based on C++ code and compile-time variables:**
294
-
* Starting PEB with administrative privileges may be disabled by setting the compile-time variable ```ADMIN_PRIVILEGES_CHECK = 1``` in the ```peb.pro``` project file before compiling the binary. A warning page is displayed in this scenario and no scripts can be executed.
295
-
* If Perl debugger interaction is not needed or considered a security risk, it can be turned off by setting the compile-time variable ```PERL_DEBUGGER_INTERACTION = 0```.
327
+
**[Optional security features based on compile-time variables and C++ code:](#security-compile-time-variables)**
296
328
297
329
**Perl security setting:**
298
330
PEB executes all Perl scripts with the ```fork``` core function banned using the command line switch ```-M-ops=fork```. ```fork``` is banned to avoid orphan processes, which may be created if this function is carelessly used.
0 commit comments