3 ms·
GNU Shepherd itself doesn't implement sandboxing, but you can use the least-authority-wrapper to do namespaces. There are other tools to do more comphrensive sa
by foretoldfeline 1y ago
GNU Shepherd itself doesn't implement sandboxing, but you can use the least-authority-wrapper to do namespaces. There are other tools to do more comphrensive sandboxing, which Shepherd can use, e.g. nsjail.
least-authority-wrapper: https://codeberg.org/guix/guix/src/commit/e3fbaeee1386fd447f40ffdf53d964d1f8541d49/guix/least-authority.scm#L44 https://codeberg.org/guix/guix/src/commit/e3fbaeee1386fd447f...
- lynx97 1y agoUoh, nsjail ha? The namespace for project names seems exhausted. No germans on the dev team, ey?
- foretoldfeline 1y agohttps://github.com/google/nsjail https://github.com/google/nsjail
- kwk1 1y agoWhat is the problematic connotation for 'nsjail' in German?