This commit is contained in:
Raja Grewal 2024-07-28 22:04:30 +10:00
parent d2d024ebe9
commit 9cabaa1bd1
No known key found for this signature in database
GPG Key ID: 92CA473C156B64C4

View File

@ -196,7 +196,7 @@ vm.max_map_count=1048576
## Disable the miscellaneous binary format virtual file system to prevent unintended code execution.
## Prevents registering interpreters for various binary formats based on a magic number or their file extension.
## Otherwise arbitrary executables with recognized file formats will be passed to relevant user space applications.
## These interpreters will thn run with root permissions when a setuid binary is owned by root.
## These interpreters will then run with root permissions when a setuid binary is owned by root.
## Can stop maliciously crafted files with specific file extensions from automatically executing.
## Breaks many scripts that do not have appropriate shebang interpreter directives (#!/bin/...).
##