Laoise Nic Giolla Uidhir on Nostr: yes, i know what it does — i’m just saying it doesn’t actually increase ...

yes, i know what it does — i’m just saying it doesn’t actually increase security.

for example, did you ensure every executable on the system that root might execute is schg? if not, a few random executables being schg doesn’t help.

firewall modification is already restricted to root. what sort of attack are you protecting against where someone has root but needs to modify the firewall rules? (and are you sure they can’t just edit some file in /etc and wait for you to reboot?)

the problem with securelevel is it does a bunch of things that *look* like they should increase security, but in practice, aren’t useful against any real world attacks.