3 ms·
The usual defense is to keep user writable spaces on separate mount points, where in theory they may be able to link with each others' files, but not anything i
by tedunangst 5y ago
The usual defense is to keep user writable spaces on separate mount points, where in theory they may be able to link with each others' files, but not anything important. And then be mindful about whatever dumb script you run that mucks with permissions.
- viraptor 5y ago"others' files, but not anything important" reminded me of https://xkcd.com/1200/ https://xkcd.com/1200/ - user files are pretty much the only important thing in many scenarios.
- tedunangst 5y agoUsers have a trivial defense: set permissions to prevent others from seeing the files. System files tend to live in world readable directories.