From fd32509e3b42e0e7f17acacf8b1bf191ed72d055 Mon Sep 17 00:00:00 2001
From: Jan-Piet Mens <jp@mens.de>
Date: Tue, 28 Jul 2026 14:21:59 +0200
Subject: [PATCH] disable WITH_KILL compile-time flag by default 	closes
 #573

---
 doc/SECURITY.md           | 2 +-
 etc/centos/config.mk.in   | 2 +-
 etc/debian/config.mk.in   | 2 +-
 etc/raspbian/config.mk.in | 2 +-
 etc/ubuntu/config.mk.in   | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/doc/SECURITY.md b/doc/SECURITY.md
index f887788..a140d07 100644
--- a/doc/SECURITY.md
+++ b/doc/SECURITY.md
@@ -22,7 +22,7 @@ Implementing HTTP caused a whole slew of additional issues we needed to resolve,
 
 Very specifically we need to warn Recorder users using HTTP:
 - any client permitted to access the `/pub` endpoint can publish data to the Recorder
-- any client permitted to access the `/api` endpoint can access any user's data, and even destroy it, depending on whether or not the Recorder was built with the `WITH_KILL` flag.
+- any client permitted to access the `/api` endpoint can access any user's data, and even destroy it, depending on whether or not the Recorder was built with the `WITH_KILL` flag. (Since July 2026, our packages are built with this setting set to `no`, i.e. disabled.)
 - any client permitted to access the `/ws` endpoint can access users' LAST locations
 
 ## payload encryption
diff --git a/etc/centos/config.mk.in b/etc/centos/config.mk.in
index a3c1f87..5af955e 100644
--- a/etc/centos/config.mk.in
+++ b/etc/centos/config.mk.in
@@ -9,7 +9,7 @@ WITH_HTTP ?= yes
 WITH_TOURS ?= yes
 WITH_LUA ?= yes
 WITH_PING ?= yes
-WITH_KILL ?= yes
+WITH_KILL ?= no
 WITH_ENCRYPT ?= yes
 
 STORAGEDEFAULT = /var/spool/owntracks/recorder/store
diff --git a/etc/debian/config.mk.in b/etc/debian/config.mk.in
index 2d9c4dc..ceff85f 100644
--- a/etc/debian/config.mk.in
+++ b/etc/debian/config.mk.in
@@ -9,7 +9,7 @@ WITH_HTTP ?= yes
 WITH_TOURS ?= yes
 WITH_LUA ?= yes
 WITH_PING ?= yes
-WITH_KILL ?= yes
+WITH_KILL ?= no
 WITH_ENCRYPT ?= yes
 WITH_TZ ?= yes
 
diff --git a/etc/raspbian/config.mk.in b/etc/raspbian/config.mk.in
index 1830e41..c65e818 100644
--- a/etc/raspbian/config.mk.in
+++ b/etc/raspbian/config.mk.in
@@ -10,7 +10,7 @@ WITH_HTTP ?= yes
 WITH_TOURS ?= yes
 WITH_LUA ?= yes
 WITH_PING ?= yes
-WITH_KILL ?= yes
+WITH_KILL ?= no
 WITH_ENCRYPT ?= yes
 WITH_TZ ?= yes
 
diff --git a/etc/ubuntu/config.mk.in b/etc/ubuntu/config.mk.in
index 07ef7bf..f0607eb 100644
--- a/etc/ubuntu/config.mk.in
+++ b/etc/ubuntu/config.mk.in
@@ -9,7 +9,7 @@ WITH_HTTP ?= yes
 WITH_TOURS ?= yes
 WITH_LUA ?= yes
 WITH_PING ?= yes
-WITH_KILL ?= yes
+WITH_KILL ?= no
 WITH_ENCRYPT ?= yes
 WITH_TZ ?= yes