wland32

Order of action and filter

2

https://github.com/Neo23x0/auditd/blob/da8d66d5565e4a4634db8387891ebc1f61e4b9d2/audit.rules#L117 Why it the order of action and filter in this line "-a exit,always" and not "-a always,exit" like all the other lines have? This line https://github.com/Neo23x0/auditd/blob/master/audit.rules#L90 also seems to...

Dropping Privileges

1

Since bubblewrap is a suid application (on many systems), I had a look at the privilege dropping part. Taking this as an example https://www.oreilly.com/library/view/secure-programming-cookbook/0596003943/ch01s03.html there seem to be several things...