[#1657] added note about security regarding the executed script

diff --git a/doc/sphinx/arm/hooks-run-script.rst b/doc/sphinx/arm/hooks-run-script.rst
index 3a424a20475f30a48dd6a3c2830b5e0bd07611d3..70ad3d82c58245e71159d209289a77c32e58debf 100644 (file)
--- a/doc/sphinx/arm/hooks-run-script.rst
+++ b/doc/sphinx/arm/hooks-run-script.rst
@@ -31,6 +31,10 @@ If the 'sync' parameter is false, then the script will be launched and Kea
 will not wait for the execution to finish, causing all the OUT parameters of
 the script (including next step) to be ignored.
 
+.. note::
+
+   The script inherits all privileges from the server which calls it.
+
 .. note::
 
    Currently the functionality underneath 'sync' parameter is not implemented

diff --git a/src/hooks/dhcp/run_script/run_script.dox b/src/hooks/dhcp/run_script/run_script.dox
index c76300f2acb0569c535e31abd9902a342f4c1da3..ce29507e833e358eab27d1ebcbe8a73e1acd2aae 100644 (file)
--- a/src/hooks/dhcp/run_script/run_script.dox
+++ b/src/hooks/dhcp/run_script/run_script.dox
@@ -72,6 +72,9 @@ to wait synchronously for the script to finish execution.
 If the 'sync' parameter is false, then the script will be launched and Kea
 will not wait for the execution to finish, causing all the OUT parameters of
 the script (including next step) to be ignored.
+
+The script inherits all privileges from the server which calls it.
+
 Currently the functionality underneath 'sync' parameter is not implemented
 and enabling synchronous calls to external script is not supported.