pump.io icon indicating copy to clipboard operation
pump.io copied to clipboard

Audit all code loaded as root

Open strugee opened this issue 5 years ago • 0 comments

I would like to audit all the code we load as root to make sure it's not doing anything malicious. To limit scope, this ticket does not encompass:

  • Anything that is only loaded as the serverUser, not root
  • Auditing for code correctness (i.e. we will only be looking for obviously hostile code, not potential security bugs)

I will probably have to write some tooling to help us continue to track this as we update transitive dependencies.

Dep #1555

strugee avatar Jul 10 '18 21:07 strugee