Comment Comment by smaudet Actually, the only secure default is to deny everything...how do you know that innocent command is actually innocent? parent smaudet 5 months ago