CG-NAT is bulllllllllllshiiiiiiiiit.

@rimu @lightweight

By user

But it depends on any other isolation / hardening stuff that has been added by your distro.

Ubuntu 22 and later complains a lot but I never investigated why.

RHEL / CentOS / Rocky are fine.

@risottobias @whitequark

There are a lot of fun things in the proc filesystem. That’s a good one.

One I quite like is extracting the environment variables for a running process.

tr '\0' '\n' < /proc/PID/environ

You can search that for API keys and secrets. It is limited to only your own processes but still fun.

I used this recently to figure out why a long running processes was sending logs to the wrong place. Someone had slid another export into its startup script!

@whitequark #Linux #tech