5 ms·
If the "something malicious" is run by a user that only has permissions to read/write to his home, it's perfectly contained.
by rahrahrah 10y ago
If the "something malicious" is run by a user that only has permissions to read/write to his home, it's perfectly contained.
- angry_octet 10y agoUnfortunately not true. By default programs will also have permission to do things like mmap, open network sockets, use IPC, learn about other processes and the kernel via proc (helping to defeat randomised protection against stack overflow) and many other areas. Google for kernel hardening and PaX.