No I wasn’t. This has nothing to do with me. I do my best to not interact with you at all, as all you do is try to troll me. Like this. I just came in here because I saw a notification that a comment was flagged, and I explicitly unflagged it, and … sigh, tried to explain how to make sure you don’t get flagged again. (Don’t troll).
Of course, that was ignored.
You haven’t asked a question. Answering a question depends on the question actually being asked.
“Of course it does.”
EDITORIAL COMMENT:
as @tm1000 explains below, it does not have ‘direct’ root access. It has a decoupled ability to access very ‘narrow’ root capabilities through incron that we attempt to very carefully define. For example, we may provide the ability to pass an IP address and then trigger a script that runs as root, and after verifying with signature checks that the script has not been tampered with, will take the IP address and run a specific iptables command to add that IP address to a white list. That’s the level of root access that is provided, as explained in several other threads and locations.
EDITORIAL COMMENT FINISHED, BACK TO OUR REGULARLY SCHEDULED CONTENT:
Have you not even read the firewall thread? Or the wiki page? Or the documentation? Or the design documents? Or anything? Have you even tried to look at the code? This is all extremely well documented and explained.
However, if you DO have a question about the firewall, why don’t you try reading the firewall thread? There’s about 90 posts there, and I’m sure all your questions will be answered.
This thread is now extremely off topic, please don’t spam.
Edit: I’ve moved these two posts to their own new thread. Please feel free to continue to discuss security issues here.