what are legitimate reason for a program to need access to /proc/self/mem [migrated]

I have noticed that both browsers Firefox and Chromium on linux do open the file /proc/self/mem for reading. No other program on my system reads this file, as far as I can tell.
/proc/self/mem is notorious for being vector for endless priv… Continue reading what are legitimate reason for a program to need access to /proc/self/mem [migrated]

user namespaces: do they increase security, or introduce new attack surface?

user namespaces in Linux are presented as a security feature, which should increase security. But is this really true?
Is it possible that while user namespaces fix one kind of problem, they introduce another, unexpected, problem with pote… Continue reading user namespaces: do they increase security, or introduce new attack surface?