Yes, having to always explicitly specify all the fine grained capabilities a pro... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		fhars on Nov 4, 2022 \| parent \| context \| favorite \| on: Sudo: Heap-based overflow with small passwords Yes, having to always explicitly specify all the fine grained capabilities a process might need is a pain, too.

jeroenhd on Nov 4, 2022 [–]

With Ubuntu's AppArmor you can run a lot of software without hassle because the ACLs come with the OS package.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact