Lynis – Security auditing and hardening tool, for Unix-based systems

Re:Lynis – Security auditing and hardening tool, for Unix-ba... by perlgeek on Sunday November 10, 2024 @02:48AM (#42098990)

Where does it say on that page that the hardening is not making them world-readable?

> If a compiler is found, execution should be limited to authorized users only (e.g. root user).

[ Parent | on HN ]

Re:Lynis – Security auditing and hardening tool, for Unix-ba... by viraptor on Sunday November 10, 2024 @04:11AM (#42099214)

Unless you also mount some partitions noexec, making things not executable is useless. And if you have access to python/perl/ruby, you can construct any binary in memory anyway. And that's assuming someone's targeting some vulnerability chain which uses the compiler which is a stretch anyway.

[ Parent | on HN ]