Benefit

All of our native scripts call run0 directly even when fairly limited root privileges are needed. Hence principle of least privilege, security will benefit from reduce the privileges of these processes

Solution

Use systemd process sandboxing (see this)

Alternatives

We could use custom selinux modules and apply them to specific run0/root invocations. The predone systemd solution seems easier and more maintainable.

Declaration

• I agree to follow this project's Code of Conduct.
• I declare that this is not a request for alternate community messaging or social platforms.
• I declare that I have read the secureblue website and my feature request is in-scope.