From 3b10ac8250a6bf35b270e688030d12f8a15cc6d4 Mon Sep 17 00:00:00 2001 From: project-repo Date: Sat, 7 Jan 2023 22:37:17 +0100 Subject: [PATCH] Adjust SECURITY.md --- SECURITY.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index b5a7b44..bd7c388 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -3,10 +3,8 @@ The main possibility for security bugs in cagebreak is by privilege escalation through the socket. Any program with access to the socket immediately gains arbitrary code execution rights. The socket -is restricted to the user of the cagebreak process (700). - -The socket has to be explicitely enabled by invoking Cagebreak with -the `-e` flag. +is restricted to the user of the cagebreak process (700) and has to +be explicitely enabled using the `-e` flag on invocation. If you disagree with this threat model, you may contact us via email (See section Email Contact below.) or [open an issue on github](https://github.com/project-repo/cagebreak/issues/new).