back

by josephcsible·5y ago·view on hn ↗
If the third party code runs with a different UID, then it can't read the environment either.
1 comments
Unless it has DAC override or other capabilities. Belt and braces!
If it has DAC override, then it can read your credentials file just as easily as it can the environment.
Not if SELinux policy prevents it.