The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
1answer
69 views

Principle of least privilege: Does Authbind helper really need setuid root, or can it run with cap_net_bind_services?

Does Authbind's helper really need setuid root, or can it run with the CAP_NET_BIND_SERVICES capability and still work?
2
votes
0answers
48 views

LXC: Have rootfs mounted without nosuid

I have the container's rootfs in a volume mounted with the nosuid option. When I start the container, its / mounted is then also mounted nosuid, which breaks programs such as sudo. How can I avoid ...
1
vote
0answers
63 views

Limit program execution to a list of arguments

I would like that my Unix users can only run a specific command insecurecommand with a controlled list of arguments stored in a file. The only solution I have found at this time is to : Create a ...
0
votes
0answers
87 views

Running MATLAB on Linux with SGID

I want to run my matlab instance as a special group. I tried setting sgid on matlab-startup-script or (not exclusive) on MATLAB-binary. Both ways were not successful. For example running sudo chmod ...