-
I am not sure which mailing list to best send this question to or which people to ask about this, so I am hoping for some advice from here.
We are trying to namespace the Linux Integrity Measuremen…
-
System V message queues are acquired with msgget(2).
The key for acquiring these is in a system-global namespace,
so it seems that we might want to restrict their use somehow,
even when they are ra…
-
[*statfs*(2)](https://man7.org/linux/man-pages/man2/statfs.2.html) lets callers probe for the existence of files, and retrieve information about the file system. We might want to restrict that.
* …
-
### Check for existing issues
- [X] Completed
### Describe the feature
Related to #12354. Language servers downloaded by Zed have full access to everything on the machine. This is problematic from …
-
`cptbox`, after #188, should logically implement multiprocess debugging support. This may one day permit the implementation of a `BASH` language, if we manage to limit what it can `exec`.
-
CvPlayer:8454
```cpp
//WTP, ray, Settler Professsion - START
//only if player is still alive
if (!bKill)
{
// Only Colonial Players, but not Kings, not Natives, not Animals, ...
…
-
Was just testing Grml for recovery (via [grml-systemd-boot](https://aur.archlinux.org/packages/grml-systemd-boot/)) and verification step is not working nicely. It just outputs the following error:
…
-
Hi,
I am test building zathura 0.5.8 for musl but I am hitting a snag with the sandbox. Last known good version is 0.5.6.
I am also unformiliar with landlock or musl in general so I dont know who i…
-
It appears that, when a `library` specifies some `ld-options`, these `ld-options` are passed to `gcc` when it's invoked to link some object files generated as part of some the pipeline to turn a `hsc`…
-
Mostly for fun.
https://landlock.io/