Re:Re: Integrating "safe" languages into OpenBSD? (2017)
by anthk on Sunday May 03, 2020 @02:53PM
(#23061048)
That's not BSD cat, that's GNU cat.
And I am using AWK and KSH + dcgi in my Gopher server with a
chrooted root gopher hole, it works fine.
[ Parent
| on HN ]
Re:Re: Integrating "safe" languages into OpenBSD? (2017)
by numbsafari on Sunday May 03, 2020 @04:13PM
(#23061515)
In fact, it’s neither, it’s coreutils (gnu, yes) `date`. My point is that seemingly innocuous system utilities do make for exploit targets, because folks shell to them.
Yes, you can lock things down with jails/containers, but it’s a valid target. Defense in depth, and all that jazz.