Post #1539672
2025-11-21 07:37 UTC
@breiti @daandemeyer @pid_eins
No, the problem is that with --empower, a user can create a file that is supposed to be writable only for root, but after that, the file *is writable without being root or using run0 at all*, because it is owned by the regular user instead of root.
Replies (1)
-
@breiti@mastodon.social 2025-11-21 07:39
@nik @daandemeyer @pid_eins sure but again sudo has the same problem? A user could (depends on the sudo config) put a file there and chown it to a user as well.