I believe “after” is better, and these before-and-after diagrams are intended to help you agree. Are they succeeding? What might help more? https://octodon.social/media/gB9mPczQad9rQbK6-ok https://octodon.social/media/S-81mM_N1LCxe7ORy1U
@schmonz "what might help?"
Knowing which is before and which is after would be helpful.
@schmonz ok, it depends on the definition of better. It looks to me like the attack surface is smaller in the before state (that is, there are fewer operations performed as root, meaning fewer chances that there will be an exploitable bug that can give the attacker root privileges).
@MightyBigCar that’s a very reasonable reading. I’ve tried to address that in the web page where these graphs might appear, which I’d better just link to already: https://schmonz.com/qmail/acceptutils
@MightyBigCar also, ha ha autocorrect. “Naked” meant to be “named”
@MightyBigCar ha! Indeed. Left is old, right is new hotness. In context, they’ll each appear in a naked section of the page with more details.