3 ms·
> Best thing I found was to ptrace the child, and inject seccomp policies after startup huh, apparently according to sudo manual that is exactly what sudo NOEX
by zokier 3y ago
> Best thing I found was to ptrace the child, and inject seccomp policies after startup
huh, apparently according to sudo manual that is exactly what sudo NOEXEC does