Comment by 0c3ca83
1 hour ago
That seems like a massive hole in the model that would make it very hard to lock down multi-process/privsep programs like sshd.
1 hour ago
That seems like a massive hole in the model that would make it very hard to lock down multi-process/privsep programs like sshd.
Sandboxing something like that is challenging, yes. But probably not for this reason you can always disclaim responsibility for your process.
It really isn't; the program just needs to be able to declare what it expects it should be able to do, and what it expects its children should be able to do. The latter doesn't need to be a subset of the former.
That “just” is doing a LOT of work.
2 replies →
This is really hard to do in general
1 reply →