3 ms·
And “find” can easily execute arbitrary subcommands, which may not be readonly.
by hamburglar 7mo ago
And “find” can easily execute arbitrary subcommands, which may not be readonly.
- angry_octet 7mo agoWe need a new suite of utilities with defined R/W/X properties, like a find that can't -exec arbitrary programs. Ideally the programs would have a standard parseable manifest. I've seen this before with sodoers programs including powerful tools. Saw one today with make, just gobsmacked.
- cyberge99 7mo agoThat exists as SELinux.