6 ms·
Not installing compilers on production machines is a relic from 1990 that doesn't impact security in any meaningful way. If I have access to your machine I can
by 4ad 15y ago
Not installing compilers on production machines is a relic from 1990 that doesn't impact security in any meaningful way. If I have access to your machine I can upload a compiler and/or I can upload binaries generated by a compiler at my end of the pipe.
- binarycrusader 15y agoRelic or not, that's the way things are in many businesses and governments.
- Someone 15y agoI think systems that do not have a compiler will try hard to make it impossible for normal users to do chmod +x, too. Users likely will not have a login shell, and they will have a umask set to prevent creation of executable files.
- alexchamberlain 15y agoIs it not more that compiling on a different machine should force you to test on that machine, thus uploading a known good binary to production?