- Mount $HOME as noexec
- Disable execution bit for all directories for home
- If the UNIX variant allows it, jail/contain home for each user session
- Punish users or their employer if a consulting firm severely that bypass IT regulations
- Disable execution bit for all directories for home
- If the UNIX variant allows it, jail/contain home for each user session
- Punish users or their employer if a consulting firm severely that bypass IT regulations
So I wanted to ask: where such a level of security would be required? And also, what attacks does it defend from?
/usr/bin/env $your_binary