foretoldfeline

2 ms·

1. 1.▲
   by foretoldfeline 1y ago

   https://fosdem.org/2025/schedule/event/fosdem-2025-5315-shep...
2. 2.▲
   by foretoldfeline 1y ago

   https://github.com/google/nsjail
3. 3.▲
   by foretoldfeline 1y ago

   GNU Shepherd itself doesn't implement sandboxing, but you can use the least-authority-wrapper to do namespaces. There are other tools to do more comphrensive sandboxing, which Shepherd can use, e.g. nsjail. least-authority-wrapper: ht
4. 4.▲
   by foretoldfeline 1y ago

   > Does every service have hooks for possible extensions? What if a new service doesn't fit existing extension hooks? No, only few services define service extensions. It's more common for services to be configured solely via the