Deny DYLD_* for any s{u,g}id binary, not just root.

sektioneins / SUIDGuard

SUIDGuard - a TrustedBSD Kernel Extension that adds mitigations to protect SUID/SGID processes a bit more

390 stars 52 forks source link

Deny DYLD_* for any s{u,g}id binary, not just root. #9

Closed jpouellet closed 7 years ago

jpouellet commented 9 years ago

If we agree that #8 is a valid concern, then perhaps this is a valid fix?

jpouellet commented 7 years ago

Closing. It's been open for over a year with no activity, I no longer use OS X, am trying to reduce my number of pending pull requests, and doubt this is even relevant anymore.