Also known as enumerating badness. Yes it is a terrible way to operate, and should never be used on secure systems. it is reactive(closing the barn door after

Also known as enumerating badness. Yes it is a terrible way to operate, and should never be used on secure systems. it is reactive(closing the barn door after the horse got away) endless, thankless task. but.... It always feels wrong to preemptively squash creativity. to make rules not saying what people can't do. but only what they can do. You really have to embrace the police state if you only use positive permissions. A koan from /usr/games/fortune "Every program has two purposes -- one for which it was written and another for which it wasn't."