ceos/cagebreak
1
0
Fork 0
mirror of https://cagebreak.project-repo.co/cagebreak.git synced 2026-08-23 22:14:18 +02:00
Code Issues Projects Releases Packages Wiki Activity

Adjust SECURITY.md

Browse source
This commit is contained in:
project-repo 2023-01-07 22:37:17 +01:00
commit 3b10ac8250
1 changed files with 2 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

6
SECURITY.md
View file

@ -3,10 +3,8 @@
The main possibility for security bugs in cagebreak is by privilege
escalation through the socket. Any program with access to the socket
immediately gains arbitrary code execution rights. The socket
is restricted to the user of the cagebreak process (700).
The socket has to be explicitely enabled by invoking Cagebreak with
the `-e` flag.
is restricted to the user of the cagebreak process (700) and has to
be explicitely enabled using the `-e` flag on invocation.
If you disagree with this threat model, you may contact us via email (See
section Email Contact below.) or [open an issue on github](https://github.com/project-repo/cagebreak/issues/new).