4 ms·
There was some great lwn commentary a while back about Linux permissions being borked in the modern era... that mount-level (instead of mixed-file-level) was a
by ramses0 11mo ago
There was some great lwn commentary a while back about Linux permissions being borked in the modern era... that mount-level (instead of mixed-file-level) was a better modern model.
Maybe something like bsd's "pledge" where user-invoked processes don't get all capabilities automatically?
Linux has been too "high trust" for a while now, and I don't know what the appetite is for us all digging out of it is...
- Nextgrid 11mo agoThere are two issues - one is that the permission model of Linux may not be suitable for modern workloads, but the second is that Linux is a huge, constantly-moving beast written in a memory-unsafe language and has regular privilege escalation exploits. Addressing the former still won’t address the latter. Hypervisor-based security seems to be the least worst way to deal with this problem currently, and indeed appears to be a successful defense given cloud providers’ bottom-lines.