Lines Matching +full:always +full:- +full:running

1 .. SPDX-License-Identifier: GPL-2.0
12 `samples/check-exec/inc.c`_ example.
15 security risk of running malicious scripts with respect to the execution
17 not.  For instance, Python scripts running on a server can use arbitrary
20 However, a JavaScript engine running in a web browser should already be
30 ``SECBIT_EXEC_RESTRICT_FILE`` or ``SECBIT_EXEC_DENY_INTERACTIVE`` were always
31 set to 1 (i.e. always enforce restrictions).
41 Programs should always perform this check to apply kernel-level checks against
60 To avoid race conditions leading to time-of-check to time-of-use issues,
76 securebits but without relying on any other user-controlled configuration.
96 should always deny such execution if ``SECBIT_EXEC_DENY_INTERACTIVE`` is set.
107    Always interpret scripts, and allow arbitrary user commands (default).
111    ``AT_EXECVE_CHECK`` which should always be performed but ignored by the
123    /tmp/*.sh``).  This makes sense for (semi-restricted) user sessions.
127    Always interpret scripts, but deny arbitrary user commands.
131    dm-verity/IPE) but where access rights might not be ready yet.  Indeed,
143 .. _samples/check-exec/inc.c:
144    https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/samples/check-exec/inc.c