Embed Notice

@feld low effort code execution will do that, even if it's "just LPD user" gated. Write access to /tmp as LPD in theory isn't bad but what software checks if it's /tmp files were written by the correct user? Could in theory abuse that to smuggle some other stuff in. Deploying a remote terminal shouldn't be difficult either.

Running code on a system as system user but not root is still a place of massive opportunities (seen more than a share of code that assumes any user ID with three digits or less is privileged and should be allowed to do things with other things).