3 ms·
Well, you want it to run shutdown don't you? Afraid your ups will hack you?
by nottorp 3y ago
Well, you want it to run shutdown don't you?
Afraid your ups will hack you?
- NelsonMinar 3y agoThere's many safer ways to let a mostly untrusted process run shutdown. Like a sudo setup letting the UPS user only run shutdown. Or /etc/shutdown.allow. Or something using CAP_SYS_BOOT. systemd might have a solution too. I get the impression I just spent more time thinking about this writing my response to you than the APC folks ever did. Yes, I am afraid my UPS will hack me. More specifically I'm afraid this badly written closed source software will have some security hole that can be used to escalate to root.
- nottorp 3y ago> this badly written closed source software We are talking about apcupsd right? http://apcupsd.org http://apcupsd.org Were you under the impression it's official software done by APC?