4 ms·
Running a script as root which contains `rm -rf --no-preserve-root /` isn't really a CVE. It's like saying the lock was broken but you left the front door wide
by gradientsrneat 1y ago
Running a script as root which contains `rm -rf --no-preserve-root /` isn't really a CVE. It's like saying the lock was broken but you left the front door wide open. To Puppy/EasyOS's credit, at least the web browser doesn't run as root by default. But that's not saying much.
- adastra22 1y agoThe think the emphasis is on the first part: homebuilt container implementation. Running as root in a container is only safe if you trust the security of the containerization system.