TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Ask HN: Could apparmor help as a solution for the Shellshock?

1 点作者 goferito超过 10 年前

1 comment

lutusp超过 10 年前
A qualified no. If a remote process can issue local shell commands, then AppArmor has no protective role. If AppArmor prevents a process from running at all, then yes, but that&#x27;s a completely different question.<p>For a Web server using CGI, AppArmor has no role. For an SSH login process, AppArmor has no role except to prevent the execution of certain programs. By the time AppArmor is choosing which applications may run, a remote login could have exploited the Shellshock bug and be past AppArmor&#x27;s control.