Preventing curl | bash

Sheogorath <[email protected]>
Newsgroups gmane.linux.redhat.fedora.selinux
Message-ID <[email protected]>
Hi,

it's mostly a question out of curiosity but maybe useful for some people.

I wonder if there is a way to prevent a direct piping from curl to bash
using SELinux.

And of course one can download a file and then run bash on it, but a
simple rule that prevents direct piping would at least give a heads up
about it.

-- 
Signed
Sheogorath

_______________________________________________
selinux mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=lA6H
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.