[security suggestion] Limit container access to Google drive specific folders about gooby HOT 9 CLOSED

I'm no expert, but when setting up Rclone I specify a root folder. This folder equals my media folder in my Google Drive. Would that not be enough if each user did this? Or would it not matter since Rclone already store a Google Drive authentication token?

from gooby.

Yes you are right, I hadn't thought of this one. Will the rclone config survive an update?

I still would suggest to inform the user of this possibility, so that the default option doesn't leave his/her drive all exposed.

from gooby.

Yes, this survives updates to Gooby.

As for your suggestion it would be up to @TechPerplexed.

from gooby.

I can't seem to make it work. I edited the remote with rclone config according to instructions in https://rclone.org/drive/#root-folder-id but when I check the contents of /mnt/google, it still shows the full structure from the root of the drive. I tried rebooting and flushing the cache using rclone rc vfs/forget, same result...
Can you share how you did it?

from gooby.

I also had problems updating my Rclone mount previously and I ended up making a fresh install. However, you could try to:

1. Run a system clean - E, C
2. Remove Rclone - B, A, R
3. Install Rclone again and add new remote - B, A, I

Also, @TechPerplexed will wake up in a few hours to hopefully chip in.

from gooby.

I've removed rclone and reinstall it again. I should note that the configuration survived so the remote was still there, so I deleted and created it again, this time with the proper info.

What is really interesting is that after I quit the configuration, I was asked for the name of the mount and the media folder:

Confirm that this is what you named your mount: Gdrive

What is your media folder in Gdrive? (leave empty for root): Video

So it seems that this was already foreseen, although I don't really remember if I saw it the first time.

Nevertheless, I would recommend to highlight this choice and explain the implications of leaving open the root of the drive.

Thanks for your support!

from gooby.

Happy that it worked out :-)

from gooby.

Yes, this feature was introduced with version 2.1. I'll add a message that using root is not recommended. Thanks for the suggestion!

from gooby.

Implemented - and thanks again :)

from gooby.