GET https://kbin.spritesserver.nl/index.php/m/linux@lemmy.ml/t/15233/Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific/oldest

Response
200 OK
IP
216.73.216.122
Profiled on
Token
58b0b0

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 21.46 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.07 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#274
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#268
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#270
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
  +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
  +url: null
  +body: """
    Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
    \n
    It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
    \n
    Thanks in advance.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 28
  +favouriteCount: 41
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1700701501 {#2418
    date: 2023-11-23 02:05:01.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 15233
  -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
  -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1700690925
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/8579713"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700604525 {#1858
    date: 2023-11-21 23:08:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#274
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#268
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#270
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
  +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
  +url: null
  +body: """
    Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
    \n
    It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
    \n
    Thanks in advance.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 28
  +favouriteCount: 41
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1700701501 {#2418
    date: 2023-11-23 02:05:01.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 15233
  -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
  -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1700690925
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/8579713"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700604525 {#1858
    date: 2023-11-21 23:08:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
App\Entity\Entry {#2412
  +user: Proxies\__CG__\App\Entity\User {#1978 …}
  +magazine: App\Entity\Magazine {#264
    +icon: Proxies\__CG__\App\Entity\Image {#245 …}
    +name: "linux@lemmy.ml"
    +title: "linux"
    +description: """
      From Wikipedia, the free encyclopedia\n
      \n
      Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
      \n
      Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
      \n
      ### Rules\n
      \n
      - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
      - No misinformation\n
      - No NSFW content\n
      - No hate speech, bigotry, etc\n
      \n
      ### Related Communities\n
      \n
      - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
      - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
      - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
      - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
      \n
      Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 1406
    +entryCommentCount: 28632
    +postCount: 6
    +postCommentCount: 214
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729583542 {#274
      date: 2024-10-22 09:52:22.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#236 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
    +entries: Doctrine\ORM\PersistentCollection {#179 …}
    +posts: Doctrine\ORM\PersistentCollection {#137 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
    +bans: Doctrine\ORM\PersistentCollection {#116 …}
    +reports: Doctrine\ORM\PersistentCollection {#102 …}
    +badges: Doctrine\ORM\PersistentCollection {#80 …}
    +logs: Doctrine\ORM\PersistentCollection {#70 …}
    +awards: Doctrine\ORM\PersistentCollection {#1360 …}
    +categories: Doctrine\ORM\PersistentCollection {#1792 …}
    -id: 73
    +apId: "linux@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/linux"
    +apPublicUrl: "https://lemmy.ml/c/linux"
    +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "linux"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583596 {#268
      date: 2024-10-22 09:53:16.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1698929468 {#270
      date: 2023-11-02 13:51:08.0 +01:00
    }
  }
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
  +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
  +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
  +url: null
  +body: """
    Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
    \n
    It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
    \n
    Thanks in advance.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 28
  +favouriteCount: 41
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1700701501 {#2418
    date: 2023-11-23 02:05:01.0 +01:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1688 …}
  +votes: Doctrine\ORM\PersistentCollection {#1966 …}
  +reports: Doctrine\ORM\PersistentCollection {#1965 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
  +badges: Doctrine\ORM\PersistentCollection {#2439 …}
  +children: []
  -id: 15233
  -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
  -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1700690925
  +visibility: "visible             "
  +apId: "https://lemmy.world/post/8579713"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700604525 {#1858
    date: 2023-11-21 23:08:45.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS DENIED 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
6 DENIED moderate 
App\Entity\EntryComment {#4013
  +user: App\Entity\User {#3961 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Try an `ls -l $(which nano)` and look at the permissions section of the output.\n
    \n
    Most files only have hyphens, r’s, w’s, and x’s. (Like `-rwxr-xr-x` or some such.)\n
    \n
    Particularly if there’s an “s” in the output (it’ll be in place of an “x”), that could explain what’s going on.\n
    \n
    Basically, that “s” means “when a user runs me, run me as root even if the user running me isn’t root.” It’s useful on programs like “su” and “sudo” which let you run a command that (after authentication) do things as root.\n
    \n
    But if that flag is set on nano, that’s pretty weird.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1701191441 {#4023
    date: 2023-11-28 18:10:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4011 …}
  +nested: Doctrine\ORM\PersistentCollection {#4009 …}
  +votes: Doctrine\ORM\PersistentCollection {#4007 …}
  +reports: Doctrine\ORM\PersistentCollection {#4005 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3973 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3977 …}
  -id: 148880
  -bodyTs: "'authent':99 'basic':60 'command':96 'could':54 'even':73 'explain':55 'file':17 'flag':107 'go':58 'hyphen':20 'isn':79 'l':4 'let':92 'like':28,87 'll':46 'look':8 'ls':3 'mean':63 'nano':6,111 'output':15,44 'particular':36 'permiss':11 'place':49 'pretti':114 'program':86 'r':21 'root':72,81,103 'run':67,69,77,94 'rwxr':30 'rwxr-xr-x':29 'section':12 'set':109 'su':88 'sudo':90 'thing':101 'tri':1 'use':84 'user':66,76 'w':23 'weird':115 'x':26,32,52 'xr':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5487960"
  +editedAt: DateTimeImmutable @1701063149 {#3959
    date: 2023-11-27 06:32:29.0 +01:00
  }
  +createdAt: DateTimeImmutable @1700606375 {#4022
    date: 2023-11-21 23:39:35.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
7 DENIED edit 
App\Entity\EntryComment {#4013
  +user: App\Entity\User {#3961 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Try an `ls -l $(which nano)` and look at the permissions section of the output.\n
    \n
    Most files only have hyphens, r’s, w’s, and x’s. (Like `-rwxr-xr-x` or some such.)\n
    \n
    Particularly if there’s an “s” in the output (it’ll be in place of an “x”), that could explain what’s going on.\n
    \n
    Basically, that “s” means “when a user runs me, run me as root even if the user running me isn’t root.” It’s useful on programs like “su” and “sudo” which let you run a command that (after authentication) do things as root.\n
    \n
    But if that flag is set on nano, that’s pretty weird.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1701191441 {#4023
    date: 2023-11-28 18:10:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4011 …}
  +nested: Doctrine\ORM\PersistentCollection {#4009 …}
  +votes: Doctrine\ORM\PersistentCollection {#4007 …}
  +reports: Doctrine\ORM\PersistentCollection {#4005 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3973 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3977 …}
  -id: 148880
  -bodyTs: "'authent':99 'basic':60 'command':96 'could':54 'even':73 'explain':55 'file':17 'flag':107 'go':58 'hyphen':20 'isn':79 'l':4 'let':92 'like':28,87 'll':46 'look':8 'ls':3 'mean':63 'nano':6,111 'output':15,44 'particular':36 'permiss':11 'place':49 'pretti':114 'program':86 'r':21 'root':72,81,103 'run':67,69,77,94 'rwxr':30 'rwxr-xr-x':29 'section':12 'set':109 'su':88 'sudo':90 'thing':101 'tri':1 'use':84 'user':66,76 'w':23 'weird':115 'x':26,32,52 'xr':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5487960"
  +editedAt: DateTimeImmutable @1701063149 {#3959
    date: 2023-11-27 06:32:29.0 +01:00
  }
  +createdAt: DateTimeImmutable @1700606375 {#4022
    date: 2023-11-21 23:39:35.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
8 DENIED moderate 
App\Entity\EntryComment {#4013
  +user: App\Entity\User {#3961 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Try an `ls -l $(which nano)` and look at the permissions section of the output.\n
    \n
    Most files only have hyphens, r’s, w’s, and x’s. (Like `-rwxr-xr-x` or some such.)\n
    \n
    Particularly if there’s an “s” in the output (it’ll be in place of an “x”), that could explain what’s going on.\n
    \n
    Basically, that “s” means “when a user runs me, run me as root even if the user running me isn’t root.” It’s useful on programs like “su” and “sudo” which let you run a command that (after authentication) do things as root.\n
    \n
    But if that flag is set on nano, that’s pretty weird.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 14
  +score: 0
  +lastActive: DateTime @1701191441 {#4023
    date: 2023-11-28 18:10:41.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4011 …}
  +nested: Doctrine\ORM\PersistentCollection {#4009 …}
  +votes: Doctrine\ORM\PersistentCollection {#4007 …}
  +reports: Doctrine\ORM\PersistentCollection {#4005 …}
  +favourites: Doctrine\ORM\PersistentCollection {#3973 …}
  +notifications: Doctrine\ORM\PersistentCollection {#3977 …}
  -id: 148880
  -bodyTs: "'authent':99 'basic':60 'command':96 'could':54 'even':73 'explain':55 'file':17 'flag':107 'go':58 'hyphen':20 'isn':79 'l':4 'let':92 'like':28,87 'll':46 'look':8 'ls':3 'mean':63 'nano':6,111 'output':15,44 'particular':36 'permiss':11 'place':49 'pretti':114 'program':86 'r':21 'root':72,81,103 'run':67,69,77,94 'rwxr':30 'rwxr-xr-x':29 'section':12 'set':109 'su':88 'sudo':90 'thing':101 'tri':1 'use':84 'user':66,76 'w':23 'weird':115 'x':26,32,52 'xr':31"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5487960"
  +editedAt: DateTimeImmutable @1701063149 {#3959
    date: 2023-11-27 06:32:29.0 +01:00
  }
  +createdAt: DateTimeImmutable @1700606375 {#4022
    date: 2023-11-21 23:39:35.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
10 DENIED moderate 
App\Entity\EntryComment {#4051
  +user: App\Entity\User {#4034 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Can you be more specific about what you mean by this: “gives (the file) elevated privileges”?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1701120740 {#4057
    date: 2023-11-27 22:32:20.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4049 …}
  +nested: Doctrine\ORM\PersistentCollection {#4047 …}
  +votes: Doctrine\ORM\PersistentCollection {#4045 …}
  +reports: Doctrine\ORM\PersistentCollection {#4042 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4038 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4036 …}
  -id: 148944
  -bodyTs: "'elev':15 'file':14 'give':12 'mean':9 'privileg':16 'specif':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/6007101"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700607326 {#4055
    date: 2023-11-21 23:55:26.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
11 DENIED edit 
App\Entity\EntryComment {#4051
  +user: App\Entity\User {#4034 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Can you be more specific about what you mean by this: “gives (the file) elevated privileges”?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1701120740 {#4057
    date: 2023-11-27 22:32:20.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4049 …}
  +nested: Doctrine\ORM\PersistentCollection {#4047 …}
  +votes: Doctrine\ORM\PersistentCollection {#4045 …}
  +reports: Doctrine\ORM\PersistentCollection {#4042 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4038 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4036 …}
  -id: 148944
  -bodyTs: "'elev':15 'file':14 'give':12 'mean':9 'privileg':16 'specif':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/6007101"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700607326 {#4055
    date: 2023-11-21 23:55:26.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
12 DENIED moderate 
App\Entity\EntryComment {#4051
  +user: App\Entity\User {#4034 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "Can you be more specific about what you mean by this: “gives (the file) elevated privileges”?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1701120740 {#4057
    date: 2023-11-27 22:32:20.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4049 …}
  +nested: Doctrine\ORM\PersistentCollection {#4047 …}
  +votes: Doctrine\ORM\PersistentCollection {#4045 …}
  +reports: Doctrine\ORM\PersistentCollection {#4042 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4038 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4036 …}
  -id: 148944
  -bodyTs: "'elev':15 'file':14 'give':12 'mean':9 'privileg':16 'specif':5"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.ml/comment/6007101"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700607326 {#4055
    date: 2023-11-21 23:55:26.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
13 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
14 DENIED moderate 
App\Entity\EntryComment {#4132
  +user: App\Entity\User {#4145 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "What are the permissions on the directory the file resides in?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1701119859 {#4127
    date: 2023-11-27 22:17:39.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4133 …}
  +nested: Doctrine\ORM\PersistentCollection {#4135 …}
  +votes: Doctrine\ORM\PersistentCollection {#4137 …}
  +reports: Doctrine\ORM\PersistentCollection {#4139 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4141 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4143 …}
  -id: 149084
  -bodyTs: "'directori':7 'file':9 'permiss':4 'resid':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5489160"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700610057 {#4128
    date: 2023-11-22 00:40:57.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
15 DENIED edit 
App\Entity\EntryComment {#4132
  +user: App\Entity\User {#4145 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "What are the permissions on the directory the file resides in?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1701119859 {#4127
    date: 2023-11-27 22:17:39.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4133 …}
  +nested: Doctrine\ORM\PersistentCollection {#4135 …}
  +votes: Doctrine\ORM\PersistentCollection {#4137 …}
  +reports: Doctrine\ORM\PersistentCollection {#4139 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4141 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4143 …}
  -id: 149084
  -bodyTs: "'directori':7 'file':9 'permiss':4 'resid':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5489160"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700610057 {#4128
    date: 2023-11-22 00:40:57.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
16 DENIED moderate 
App\Entity\EntryComment {#4132
  +user: App\Entity\User {#4145 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: "What are the permissions on the directory the file resides in?"
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1701119859 {#4127
    date: 2023-11-27 22:17:39.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4133 …}
  +nested: Doctrine\ORM\PersistentCollection {#4135 …}
  +votes: Doctrine\ORM\PersistentCollection {#4137 …}
  +reports: Doctrine\ORM\PersistentCollection {#4139 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4141 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4143 …}
  -id: 149084
  -bodyTs: "'directori':7 'file':9 'permiss':4 'resid':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://lemmy.world/comment/5489160"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700610057 {#4128
    date: 2023-11-22 00:40:57.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
17 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
18 DENIED moderate 
App\Entity\EntryComment {#4206
  +user: App\Entity\User {#4219 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    The directory you are creating your files in likely is set to immutable or append only.\n
    \n
    lsattr -d /path/to/directory\n
    \n
    if you see i or a, then that's the issue.\n
    \n
    You can remove them with  \n
     sudo chattr -i /path/to/dir #removes immutable  \n
     sudo chattr -a /path/to/dir #removes append only\n
    \n
    Same goes for files but if it happens to all files in a directory, then that is probably it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 4
  +score: 0
  +lastActive: DateTime @1700617195 {#4200
    date: 2023-11-22 02:39:55.0 +01:00
  }
  +ip: null
  +tags: [
    "removes"
  ]
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4207 …}
  +nested: Doctrine\ORM\PersistentCollection {#4209 …}
  +votes: Doctrine\ORM\PersistentCollection {#4211 …}
  +reports: Doctrine\ORM\PersistentCollection {#4213 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4215 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4217 …}
  -id: 149322
  -bodyTs: "'/path/to/dir':39,45 '/path/to/directory':19 'append':15,47 'chattr':37,43 'creat':5 'd':18 'directori':2,62 'file':7,52,59 'goe':50 'happen':56 'immut':13,41 'issu':30 'like':9 'lsattr':17 'probabl':66 'remov':33,40,46 'see':22 'set':11 'sudo':36,42"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://kbin.social/m/linux@lemmy.ml/t/645793/-/comment/3703818"
  +editedAt: DateTimeImmutable @1701080650 {#4201
    date: 2023-11-27 11:24:10.0 +01:00
  }
  +createdAt: DateTimeImmutable @1700617195 {#4202
    date: 2023-11-22 02:39:55.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
19 DENIED edit 
App\Entity\EntryComment {#4206
  +user: App\Entity\User {#4219 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    The directory you are creating your files in likely is set to immutable or append only.\n
    \n
    lsattr -d /path/to/directory\n
    \n
    if you see i or a, then that's the issue.\n
    \n
    You can remove them with  \n
     sudo chattr -i /path/to/dir #removes immutable  \n
     sudo chattr -a /path/to/dir #removes append only\n
    \n
    Same goes for files but if it happens to all files in a directory, then that is probably it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 4
  +score: 0
  +lastActive: DateTime @1700617195 {#4200
    date: 2023-11-22 02:39:55.0 +01:00
  }
  +ip: null
  +tags: [
    "removes"
  ]
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4207 …}
  +nested: Doctrine\ORM\PersistentCollection {#4209 …}
  +votes: Doctrine\ORM\PersistentCollection {#4211 …}
  +reports: Doctrine\ORM\PersistentCollection {#4213 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4215 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4217 …}
  -id: 149322
  -bodyTs: "'/path/to/dir':39,45 '/path/to/directory':19 'append':15,47 'chattr':37,43 'creat':5 'd':18 'directori':2,62 'file':7,52,59 'goe':50 'happen':56 'immut':13,41 'issu':30 'like':9 'lsattr':17 'probabl':66 'remov':33,40,46 'see':22 'set':11 'sudo':36,42"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://kbin.social/m/linux@lemmy.ml/t/645793/-/comment/3703818"
  +editedAt: DateTimeImmutable @1701080650 {#4201
    date: 2023-11-27 11:24:10.0 +01:00
  }
  +createdAt: DateTimeImmutable @1700617195 {#4202
    date: 2023-11-22 02:39:55.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
20 DENIED moderate 
App\Entity\EntryComment {#4206
  +user: App\Entity\User {#4219 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    The directory you are creating your files in likely is set to immutable or append only.\n
    \n
    lsattr -d /path/to/directory\n
    \n
    if you see i or a, then that's the issue.\n
    \n
    You can remove them with  \n
     sudo chattr -i /path/to/dir #removes immutable  \n
     sudo chattr -a /path/to/dir #removes append only\n
    \n
    Same goes for files but if it happens to all files in a directory, then that is probably it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 4
  +score: 0
  +lastActive: DateTime @1700617195 {#4200
    date: 2023-11-22 02:39:55.0 +01:00
  }
  +ip: null
  +tags: [
    "removes"
  ]
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4207 …}
  +nested: Doctrine\ORM\PersistentCollection {#4209 …}
  +votes: Doctrine\ORM\PersistentCollection {#4211 …}
  +reports: Doctrine\ORM\PersistentCollection {#4213 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4215 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4217 …}
  -id: 149322
  -bodyTs: "'/path/to/dir':39,45 '/path/to/directory':19 'append':15,47 'chattr':37,43 'creat':5 'd':18 'directori':2,62 'file':7,52,59 'goe':50 'happen':56 'immut':13,41 'issu':30 'like':9 'lsattr':17 'probabl':66 'remov':33,40,46 'see':22 'set':11 'sudo':36,42"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://kbin.social/m/linux@lemmy.ml/t/645793/-/comment/3703818"
  +editedAt: DateTimeImmutable @1701080650 {#4201
    date: 2023-11-27 11:24:10.0 +01:00
  }
  +createdAt: DateTimeImmutable @1700617195 {#4202
    date: 2023-11-22 02:39:55.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
21 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
22 DENIED moderate 
App\Entity\EntryComment {#4279
  +user: App\Entity\User {#4292 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Do you run docker container in privileged mode? [phoenixnap.com/kb/docker-privileged](https://phoenixnap.com/kb/docker-privileged)\n
    \n
    And do you run nano inside the container?\n
    \n
    Docker container running in privileged mode has root permissions to host filesystem and devices (limited by said restrictions).
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1700627280 {#4274
    date: 2023-11-22 05:28:00.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4280 …}
  +nested: Doctrine\ORM\PersistentCollection {#4282 …}
  +votes: Doctrine\ORM\PersistentCollection {#4284 …}
  +reports: Doctrine\ORM\PersistentCollection {#4286 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4288 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4290 …}
  -id: 149604
  -bodyTs: "'/kb/docker-privileged](https://phoenixnap.com/kb/docker-privileged)':11 'contain':5,19,21 'devic':33 'docker':4,20 'filesystem':31 'host':30 'insid':17 'limit':34 'mode':8,25 'nano':16 'permiss':28 'phoenixnap.com':10 'phoenixnap.com/kb/docker-privileged](https://phoenixnap.com/kb/docker-privileged)':9 'privileg':7,24 'restrict':37 'root':27 'run':3,15,22 'said':36"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sopuli.xyz/comment/4799032"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700627280 {#4275
    date: 2023-11-22 05:28:00.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
23 DENIED edit 
App\Entity\EntryComment {#4279
  +user: App\Entity\User {#4292 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Do you run docker container in privileged mode? [phoenixnap.com/kb/docker-privileged](https://phoenixnap.com/kb/docker-privileged)\n
    \n
    And do you run nano inside the container?\n
    \n
    Docker container running in privileged mode has root permissions to host filesystem and devices (limited by said restrictions).
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1700627280 {#4274
    date: 2023-11-22 05:28:00.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4280 …}
  +nested: Doctrine\ORM\PersistentCollection {#4282 …}
  +votes: Doctrine\ORM\PersistentCollection {#4284 …}
  +reports: Doctrine\ORM\PersistentCollection {#4286 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4288 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4290 …}
  -id: 149604
  -bodyTs: "'/kb/docker-privileged](https://phoenixnap.com/kb/docker-privileged)':11 'contain':5,19,21 'devic':33 'docker':4,20 'filesystem':31 'host':30 'insid':17 'limit':34 'mode':8,25 'nano':16 'permiss':28 'phoenixnap.com':10 'phoenixnap.com/kb/docker-privileged](https://phoenixnap.com/kb/docker-privileged)':9 'privileg':7,24 'restrict':37 'root':27 'run':3,15,22 'said':36"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sopuli.xyz/comment/4799032"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700627280 {#4275
    date: 2023-11-22 05:28:00.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
24 DENIED moderate 
App\Entity\EntryComment {#4279
  +user: App\Entity\User {#4292 …}
  +entry: App\Entity\Entry {#2412
    +user: Proxies\__CG__\App\Entity\User {#1978 …}
    +magazine: App\Entity\Magazine {#264
      +icon: Proxies\__CG__\App\Entity\Image {#245 …}
      +name: "linux@lemmy.ml"
      +title: "linux"
      +description: """
        From Wikipedia, the free encyclopedia\n
        \n
        Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
        \n
        Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
        \n
        ### Rules\n
        \n
        - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
        - No misinformation\n
        - No NSFW content\n
        - No hate speech, bigotry, etc\n
        \n
        ### Related Communities\n
        \n
        - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
        - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
        - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
        - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
        \n
        Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 1406
      +entryCommentCount: 28632
      +postCount: 6
      +postCommentCount: 214
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729583542 {#274
        date: 2024-10-22 09:52:22.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#236 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
      +entries: Doctrine\ORM\PersistentCollection {#179 …}
      +posts: Doctrine\ORM\PersistentCollection {#137 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
      +bans: Doctrine\ORM\PersistentCollection {#116 …}
      +reports: Doctrine\ORM\PersistentCollection {#102 …}
      +badges: Doctrine\ORM\PersistentCollection {#80 …}
      +logs: Doctrine\ORM\PersistentCollection {#70 …}
      +awards: Doctrine\ORM\PersistentCollection {#1360 …}
      +categories: Doctrine\ORM\PersistentCollection {#1792 …}
      -id: 73
      +apId: "linux@lemmy.ml"
      +apProfileId: "https://lemmy.ml/c/linux"
      +apPublicUrl: "https://lemmy.ml/c/linux"
      +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
      +apInboxUrl: "https://lemmy.ml/inbox"
      +apDomain: "lemmy.ml"
      +apPreferredUsername: "linux"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729583596 {#268
        date: 2024-10-22 09:53:16.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1698929468 {#270
        date: 2023-11-02 13:51:08.0 +01:00
      }
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#1889 …}
    +slug: "Non-root-user-that-suddenly-has-elevated-privileges-in-a-specific"
    +title: "Non-root user that (suddenly) has elevated privileges in a specific command (only). [Have I been hacked?]"
    +url: null
    +body: """
      Title. Long,short story: creating or editing files with `nano` as my non-root user gives (the file) elevated privileges, like I have ran it w/ `sudo` or as root. And the (only) “security hole” that I can think of is a nextdns docker container running as root. That aside, its very “overkill” security-wise (cap_drop=ALL, non-root image, security_opt=no_new_privileges, etc.).\n
      \n
      It’s like someone tried to hack me but gave up halfway. Am I right or wrong to assume this? Just curious.\n
      \n
      Thanks in advance.
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 28
    +favouriteCount: 41
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1700701501 {#2418
      date: 2023-11-23 02:05:01.0 +01:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#1688 …}
    +votes: Doctrine\ORM\PersistentCollection {#1966 …}
    +reports: Doctrine\ORM\PersistentCollection {#1965 …}
    +favourites: Doctrine\ORM\PersistentCollection {#1368 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2426 …}
    +badges: Doctrine\ORM\PersistentCollection {#2439 …}
    +children: []
    -id: 15233
    -titleTs: "'command':13 'elev':8 'hack':18 'non':2 'non-root':1 'privileg':9 'root':3 'specif':12 'sudden':6 'user':4"
    -bodyTs: "'advanc':95 'asid':51 'assum':89 'cap':58 'contain':46 'creat':5 'curious':92 'docker':45 'drop':59 'edit':7 'elev':20 'etc':70 'file':8,19 'gave':80 'give':17 'hack':77 'halfway':82 'hole':36 'imag':64 'like':22,73 'long':2 'nano':10 'new':68 'nextdn':44 'non':14,62 'non-root':13,61 'opt':66 'overkil':54 'privileg':21,69 'ran':25 'right':85 'root':15,31,49,63 'run':47 'secur':35,56,65 'security-wis':55 'short':3 'someon':74 'stori':4 'sudo':28 'thank':93 'think':40 'titl':1 'tri':75 'user':16 'w':27 'wise':57 'wrong':87"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1700690925
    +visibility: "visible             "
    +apId: "https://lemmy.world/post/8579713"
    +editedAt: null
    +createdAt: DateTimeImmutable @1700604525 {#1858
      date: 2023-11-21 23:08:45.0 +01:00
    }
  }
  +magazine: App\Entity\Magazine {#264}
  +image: null
  +parent: null
  +root: null
  +body: """
    Do you run docker container in privileged mode? [phoenixnap.com/kb/docker-privileged](https://phoenixnap.com/kb/docker-privileged)\n
    \n
    And do you run nano inside the container?\n
    \n
    Docker container running in privileged mode has root permissions to host filesystem and devices (limited by said restrictions).
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 7
  +score: 0
  +lastActive: DateTime @1700627280 {#4274
    date: 2023-11-22 05:28:00.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@GustavoM@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#4280 …}
  +nested: Doctrine\ORM\PersistentCollection {#4282 …}
  +votes: Doctrine\ORM\PersistentCollection {#4284 …}
  +reports: Doctrine\ORM\PersistentCollection {#4286 …}
  +favourites: Doctrine\ORM\PersistentCollection {#4288 …}
  +notifications: Doctrine\ORM\PersistentCollection {#4290 …}
  -id: 149604
  -bodyTs: "'/kb/docker-privileged](https://phoenixnap.com/kb/docker-privileged)':11 'contain':5,19,21 'devic':33 'docker':4,20 'filesystem':31 'host':30 'insid':17 'limit':34 'mode':8,25 'nano':16 'permiss':28 'phoenixnap.com':10 'phoenixnap.com/kb/docker-privileged](https://phoenixnap.com/kb/docker-privileged)':9 'privileg':7,24 'restrict':37 'root':27 'run':3,15,22 'said':36"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://sopuli.xyz/comment/4799032"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700627280 {#4275
    date: 2023-11-22 05:28:00.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
25 DENIED edit 
App\Entity\Magazine {#264
  +icon: Proxies\__CG__\App\Entity\Image {#245 …}
  +name: "linux@lemmy.ml"
  +title: "linux"
  +description: """
    From Wikipedia, the free encyclopedia\n
    \n
    Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).\n
    \n
    Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word “Linux” in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.\n
    \n
    ### Rules\n
    \n
    - Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.\n
    - No misinformation\n
    - No NSFW content\n
    - No hate speech, bigotry, etc\n
    \n
    ### Related Communities\n
    \n
    - [!opensource@lemmy.ml](https://lemmy.ml/c/opensource)\n
    - [!libre_culture@lemmy.ml](https://lemmy.ml/c/libre_culture)\n
    - [!technology@lemmy.ml](https://lemmy.ml/c/technology)\n
    - [!libre_hardware@lemmy.ml](https://lemmy.ml/c/libre_hardware)\n
    \n
    Community icon by [Alpár-Etele Méder](https://www.iconfinder.com/pocike), licensed under [CC BY 3.0](https://creativecommons.org/licenses/by/3.0/)
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 1406
  +entryCommentCount: 28632
  +postCount: 6
  +postCommentCount: 214
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729583542 {#274
    date: 2024-10-22 09:52:22.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#236 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#232 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#221 …}
  +entries: Doctrine\ORM\PersistentCollection {#179 …}
  +posts: Doctrine\ORM\PersistentCollection {#137 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#199 …}
  +bans: Doctrine\ORM\PersistentCollection {#116 …}
  +reports: Doctrine\ORM\PersistentCollection {#102 …}
  +badges: Doctrine\ORM\PersistentCollection {#80 …}
  +logs: Doctrine\ORM\PersistentCollection {#70 …}
  +awards: Doctrine\ORM\PersistentCollection {#1360 …}
  +categories: Doctrine\ORM\PersistentCollection {#1792 …}
  -id: 73
  +apId: "linux@lemmy.ml"
  +apProfileId: "https://lemmy.ml/c/linux"
  +apPublicUrl: "https://lemmy.ml/c/linux"
  +apFollowersUrl: "https://lemmy.ml/c/linux/followers"
  +apInboxUrl: "https://lemmy.ml/inbox"
  +apDomain: "lemmy.ml"
  +apPreferredUsername: "linux"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1729583596 {#268
    date: 2024-10-22 09:53:16.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1698929468 {#270
    date: 2023-11-02 13:51:08.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS DENIED 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details