Making NoNewPrivs the default
This talk will give an update on make NoNewPrivs the default on a Linux distribution.
Running systems with “NoNewPrivs” by default is already possible without issues for many use cases, but there are still some cases where it doesn't work. As followup to last year's presentation “Accessing shadow records via varlink” this session provides an up-to-date status report on the progress made and the issues that remain.
Licensed to the public under https://creativecommons.org/licenses/by/4.0/de/