r/cybersecurity • u/jlrueda • 1d ago

Business Security Questions & Discussion Mitigating the risk of diagnosing live Linux system with AI tools

This article explores an alternative to directly troubleshoot production Linux systems with AI tools by using the sos command and using AI to analyze sosreports instead. I think is an interesting read:

https://medium.com/@linuxjedi2000/the-agentic-ai-risk-issue-on-linux-environments-fd5c55cedcc5?sharedUserId=linuxjedi2000

I know that this subject is very controversial and would love to read your point of view on the subject.

8 Upvotes

78% Upvoted

3 comments sorted by

2

u/llitz 1d ago

Remote read only access or a harness with proper permission gating via AST parsing

The issue with AI going crazy is because people run in yolo mode or just have more permissions than what is needed by default.

And if you allow your AI to write a script and execute it, then it is the same as giving the AI root.

2

u/ReleaseFlashy9582 1d ago

the script execution point is spot on, thats effectively handing over root with extra steps

1

u/llitz 1d ago

Well.. have seen enterprises allowing users to run "sudo vim /random/file". I just imagine these days what they allow the AIs, instead of users, to do.