Comment by smaudet

17 hours ago

Actually, the only secure default is to deny everything...how do you know that innocent command is actually innocent?