Re:Sudo: Heap-based overflow with small passwords
by BeefWellington on Friday November 04, 2022 @02:49PM
(#33471821)
SELinux was intended to address this very thing. It's a complex beast that people find too difficult to understand and thus usually it gets disabled.
I see this attitude in pentesting too on embedded systems. A developer encounters a problem they don't quite understand but the problem disappears when they run their app as root, so away we go.
I see this attitude in pentesting too on embedded systems. A developer encounters a problem they don't quite understand but the problem disappears when they run their app as root, so away we go.