| ▲ | anvuong 7 hours ago | ||||||||||||||||||||||||||||||||||
What kind of logic is this? It's standard in the Linux world to give important services a separate user domain. | |||||||||||||||||||||||||||||||||||
| ▲ | khalic 6 hours ago | parent [-] | ||||||||||||||||||||||||||||||||||
The standard here is not enough when the agent can escalate by finding 0 days, for example. It’s like giving a black hat a limited account. Sure it might restrict him, but not giving him an account at all is way better | |||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||