Hello, just a heads up, there's logic in the main() function to try to
guess what functions will be executed based on a bunch of different
rules, eg argv[0]-based guesses.

The Ubuntu security team expects this functionality to be removed before
we ship. Executables should have a single purpose: the 'factor' program
should not be able to delete files or directories, the 'false' program
shouldn't be able to install files with specific permissions, etc.

AppArmor profiles that name specific executables expect those
executables to do what the name says on the tin, and not two dozen other
things besides.

Thanks

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2111815

Title:
  [MIR] rust-coreutils

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rust-coreutils/+bug/2111815/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to