Recently, I learned of the concept of “Linux capabilities”. And yeah, as much as I enjoy reading up on these things, the whole time I was thinking, if something’s fucky with these capabilities, I’ll never remember to check them…
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !programmerhumor@lemmy.ml
Post funny things about programming here! (Or just rant about your favourite programming language.)
Rules:
Posts must be relevant to programming, programmers, or computer science.
No NSFW content.
Jokes must be in good taste. No hate speech, bigotry, etc.
Bad bad bad!
007is a pretty ideal permission scheme for a spy, though: Deny access to owner & group; let some 3rd party do whatever he likes.I believe thats called the honey pot
License to kill -9
“Chown’d, not stirred.”
How would you stir permissions lol? Just randomize it?
circular shift
5 points for the awk command.
10 points for a perl script.
;-)
It should be “chmod, sudo chmod”
That would’ve been smart
Smart. Maxwell Smart.
Smart. Real Smart.
chmod; sudo chmod
The man to whom unauthorized sudo attempts are reported.
Santa?
Oh no I’m screwed
(after) …ah crap it’s actually selinux…
Recently, I learned of the concept of “Linux capabilities”. And yeah, as much as I enjoy reading up on these things, the whole time I was thinking, if something’s fucky with these capabilities, I’ll never remember to check them…
Funfact: if you want to run for example HTTP server, you can run it with CAP_NET_BIND_SERVICE and no_new_priv.
Too real
SELINUX=disabled
First thing to do if you need a functioning server
Unless you’re a security guy and get off on people not being able to do their jobs due to Access Denied
Should’ve been Sean Connery and not Daniel Craig bond in the pic! Missed opportunity.
And need the extra CHMOD, JAMES CHMOD
deleted by creator
Agreed!
You can’t do that…Connery would just mount and fsck everything that moved instead of fixing the system.
ssh still doesn’t work. I’m out of ideas!