Not OC

  • Knusper@feddit.de
    link
    fedilink
    arrow-up
    6
    ·
    1 year ago

    Recently, I learned of the concept of "Linux capabilities". And yeah, as much as I enjoy reading up on these things, the whole time I was thinking, if something's fucky with these capabilities, I'll never remember to check them…

    • uis@lemmy.world
      link
      fedilink
      arrow-up
      3
      ·
      edit-2
      1 year ago

      Funfact: if you want to run for example HTTP server, you can run it with CAP_NET_BIND_SERVICE and no_new_priv.