[wolverine876]

Does fail2ban have authorization to write firewall rules? That's a high-impact vector of attack, should fail2ban have a vulnerability. Also, does fail2ban store credentials that provide that authorization?

[inferiorhuman]

Yes, no.

[dizhn]

It runs as root.