3 ms·

Where can I read about this? I see no reference in its repo: https://github.com/search?q=repo%3Atj-actions%2Fchanged-files%20CAP_SYS_PTRACE&type=code https://gi

• cyrnel 2y ago
  Every action gets these permissions by default. The reason we know it had that permission is that the exploit code read from /proc/pid/mem to steal the secrets, which requires some permissions: https://blog.cloudflare.com/diving-into-proc-pid-mem/#access-checks https://blog.cloudflare.com/diving-into-proc-pid-mem/#access... Linux processes have tons of default permissions that they don't really need.