3 ms·
> It is also an argument that locking down programs with no writeable fs is not sufficient for security. It is in fact silly since write and execute are orthog
by the8472 7y ago
> It is also an argument that locking down programs with no writeable fs is not sufficient for security.
It is in fact silly since write and execute are orthogonal. You can mount a filesystem as noexec. Although memfd does put a bullet into W^X aspirations.