Re:Using 1Password 's `op` CLI tool exposes your secrets to ...
by p49k on Wednesday September 29, 2021 @04:33AM
(#28691506)
I don’t understand why argv of other users’ processes needs to be public to non-root users in the first place, other than “that’s how it’s always been” - it’s clearly non-intuitive, so the mistake will naturally happen over and over again.
[ Parent
| on HN ]
Re:Using 1Password 's `op` CLI tool exposes your secrets to ...
by josephcsible on Wednesday September 29, 2021 @12:20PM
(#28695861)
It needs to stay public by default because otherwise it would be a breaking change. If you're willing to break things and want to change it on your own system, it's easy: just mount /proc with the hidepid option.