News for hackers. Stuff that matters.
Re:The Twelve-Factor App by lmm on Thursday October 12, 2023 @11:25PM (#37866225)
Other processes running as the same user can be blocked from reading /var/run/secrets via the likes of SELinux/AppArmor whereas they can't be blocked from reading /proc/environ.

It's a pretty fine distinction and I don't know how many people actually bother doing SELinux etc. in practice, but theoretically it's marginally better.

Re:The Twelve-Factor App by marwis on Thursday October 12, 2023 @11:48PM (#37866393)
AppArmor can restrict /proc, see example from docker: https://github.com/moby/moby/blob/master/contrib/apparmor/te...