News for hackers. Stuff that matters.

A comment on Initial support for guided disk encryption in OpenBSD installer. Parent comment

Re:Initial support for guided disk encryption in OpenBSD ins... by Zurrrrr on Wednesday March 08, 2023 @09:32AM (#35069369)
lol, you clearly have no clue. SELinux and other MAC systems are the only thing that can protect against a hostile actor getting remote root.
[ Parent | on HN ]
Re:Initial support for guided disk encryption in OpenBSD ins... by anthk on Wednesday March 08, 2023 @01:23PM (#35072730)
You need to get root in first place. Good luck trying to crack any pledged process running something outside it's allowed syscalls without being ABRT'd in zero time.
[ Parent | on HN ]
Re:Initial support for guided disk encryption in OpenBSD ins... by Zurrrrr on Wednesday March 08, 2023 @01:35PM (#35072918)
Yeah, it's not like OpenBSD hasn't had remote root issues before...

And this is exactly what I'm talking about. Putting more energy into hoping no one ever gets root rather than providing anything to protect against the scenario where it is obtained.

[ Parent | on HN ]