3 ms·
It basically means that all of your programs and users have root access. If a buffer overflow happens on an exposed non-root service, it now has a way to get ro
by collinmanderson 9y ago
It basically means that all of your programs and users have root access. If a buffer overflow happens on an exposed non-root service, it now has a way to get root access. It takes away a layer of security.
- qaq 9y agoWell for a traditional web service your only exposed service is something like NGINX. So yes it makes the vuln. in say NGINX more severe but the attack surface is pretty small. Also the only users that have access are SRE or equivalent who have root access anyway. (I am not arguing that there is no downside just that it's fairly limited in a traditional scenario)