Hacker News new | past | comments | ask | show | jobs | submit login

Unless it has DAC override or other capabilities. Belt and braces!



If it has DAC override, then it can read your credentials file just as easily as it can the environment.


Not if SELinux policy prevents it.




Consider applying for YC's W25 batch! Applications are open till Nov 12.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: