2015-12-12 16:01:26 -0500, Mike Frysinger: [...] > This is not a perfect solution as it can still be worked around by > inlining the code itself: > $ bash -c "$(cat /dev/shm/test.sh)" > hi
Or cat /dev/shm/test.sh | bash I think this kind of hardening is better left to things like selinux/apparmor. -- Stephane
