a utility for preventing exec() calls
Brought to you by:
xystrus
From: Nick C. <ni...@cl...> - 2019-02-07 14:05:24
|
I made this, it might be interesting to anyone looking to implement something like rssh, or to un-retire rssh itself: it allows you to execute a program but trap any calls to libc exec* syscall wrappers that the program might make: https://github.com/ncleaton/libcallfilt It provides a second line of defense if you've tried to block all of the options that could exec arbitrary things but you may have missed something. |