2 ms·
If something is system wide i want a commit based workflow (with minor exceptions like dhcp / ip) Everything else should be in its own folder without the abili
by dev_l1x_be 6mo ago
If something is system wide i want a commit based workflow (with minor exceptions like dhcp / ip)
Everything else should be in its own folder without the ability to change anything outside of that folder.
- Dylan16807 6mo agoWell my point is that switching to a commit-based workflow with no runtime changes doesn't solve the problem of adobe setup including a malicious commit. Isolating things to a specific folder is what actually gives any security here, and you can do that on a writable /etc too.
- dev_l1x_be 6mo agoyes and you need shared read-only global state. like resolv.conf