3 ms·
Bold of you to assume my third party code runs with the same UID and SELinux label as my credentials-handling code. (I wish, it's April 1 after all!)
by yrro 6y ago
Bold of you to assume my third party code runs with the same UID and SELinux label as my credentials-handling code.
(I wish, it's April 1 after all!)
- josephcsible 6y agoIf the third party code runs with a different UID, then it can't read the environment either.
- yrro 6y agoUnless it has DAC override or other capabilities. Belt and braces!
- josephcsible 6y agoIf it has DAC override, then it can read your credentials file just as easily as it can the environment.
- yrro 6y agoNot if SELinux policy prevents it.