Re:Show HN: Lockdown.sh Simple shell script for locking down...
by q3k on Sunday May 24, 2020 @01:58PM
(#23293256)
> Unfortunately it only appears to remount, which will not persist across reboots (unless I’m missing something).
Yeah and then it also reboots immediately. What's the point? Has this even been tested?
Re:Show HN: Lockdown.sh Simple shell script for locking down...
by hwerehqrw on Sunday May 24, 2020 @01:42PM
(#23293150)
the whole script is a beautiful exercise in cargo-cult security
it's so far out there that I almost think it's intended as performance art, rather than something anyone is supposed to actually use
> [bottom of readme] Supported OS: Debian
Not all Linux is Debian or a Debian derivative.
> Remounts /tmp /proc /dev /run to be more restrictive
Unfortunately it only appears to remount, which will not persist across reboots (unless I’m missing something).
> Restrict access to compilers
Is this actually meaningful from a security perspective? If one can get some source onto a machine and execute a compiler and then execute that binary, how is that substantially different than them just getting a binary onto the machine and executing that instead?