4 ms·
maybe https://docs.rs/cap-std/latest/cap_std/fs/index.html https://docs.rs/cap-std/latest/cap_std/fs/index.html would prevent that?
by kobebrookskC3 4y ago
maybe https://docs.rs/cap-std/latest/cap_std/fs/index.html https://docs.rs/cap-std/latest/cap_std/fs/index.html would prevent that?
- insanitybit 4y agoCapabilities are a good way to mitigate this problem, yes. At minimum cap_std::fs would prevent "../" attacks. "../" attacks are also just way less of an issue when you shove your programs into minimal containers, which at this point is more or less standard practice.