[Discuss] Copy Fail

[markw at mohawksoft.com (markw at mohawksoft.com)]

> This one is bad. Really bad. Rilly-Rilly-Super-Duper-Ultra bad.
> Patch or mitigate now.
>
> https://xint.io/blog/copy-fail-linux-distributions

I have been managing exploit mitigation on Linux for over a decade and am
completely convinced that you can not protect a system from a user. There
are so many exploits that are accessible if you have any sort of
programming tools installed.

The best way to keep a system safe is to keep users from creating
interactive sessions.

There is simply no way to trust a machine on which a user can gain shell
access.