4 ms·
How are they "public" across the entire machine?
by nnutter 10y ago
How are they "public" across the entire machine?
- phil21 10y agoI suppose it depends on your definition of public. Any environment for a process will be accessible via /proc/<pid>/environ on a linux system. Of course other users cannot read these files, however in the case of something like a Docker image all processes likely share a username and this could be a risk (especially for a public webapp that one day may information leak/allow remote command execution). At least that's my immediate take on it.