Re:Fedora 40 Plans To Unify /usr/bin and /usr/sbin
by brirec on Sunday December 24, 2023 @05:20PM
(#38757521)
I’ve never seen a distro that didn’t grant read permission to everyone for /sbin and /usr/sbin.
In any event, it doesn’t really make sense to me to deny read access for any executables, so long as you don’t also deny read access to Python or a C compiler.
Really, if permission mode bits are the only thing preventing damage from such tools your vulnerability is not within your path or mode bits.
In any event, it doesn’t really make sense to me to deny read access for any executables, so long as you don’t also deny read access to Python or a C compiler.
Really, if permission mode bits are the only thing preventing damage from such tools your vulnerability is not within your path or mode bits.