Post #2256709

You could solve a lot of this automation supply side attack if your prod machines '/usr ' read only and /tmp no exec. Not saying you should go make those changes without careful consideration. But it would change the landscape in the favor of your team controlling the infrastructure. #infosec