There are scenarios where the child runs programs and/or writes files which wouldn't be desirable under most conditions. For example, the development version of WhiteBeam allows 36 programs to be run through bash/dash. We want to be able to allow certain programs to execute when the parent process is getty/sshd, but not allow them when the parent process is (e.g.) php/java. We also want support for ANY in this field.
This issue will require a change to the SQL schema as well as regenerating the Base whitelist as needed.
There are scenarios where the child runs programs and/or writes files which wouldn't be desirable under most conditions. For example, the development version of WhiteBeam allows 36 programs to be run through bash/dash. We want to be able to allow certain programs to execute when the parent process is getty/sshd, but not allow them when the parent process is (e.g.) php/java. We also want support for
ANYin this field.This issue will require a change to the SQL schema as well as regenerating the Base whitelist as needed.