2 ms·
Yes, I should have said "without elevated privileges". That capability is still a pretty big hammer you want extracted into a helper that only does one thing.
by the8472 5y ago
Yes, I should have said "without elevated privileges". That capability is still a pretty big hammer you want extracted into a helper that only does one thing.
- throwaway82652 5y agoI hope it's possible to relax that capability in the kernel somehow, that may be a next step for someone working on sandboxing.