Tree
- Tree:
39a6226c6d8a24a36e99a0bab2cae4d1b2bf46d0
- Date:
- Message:
- fix landlock usage Mickaël Salaün, the landlock author, pointed out the same error on the got implementation. The assumption that not listed access capabilities are implicitly denied is completely wrong: > In a nutshell, the ruleset's handled_access_fs is required for > backward and forward compatibility (i.e. the kernel and user space may > not know each other's supported restrictions), hence the need to be > explicit about the denied-by-default access rights.
Dockerfile | commits | blame |
README | commits | blame |
gencert* | commits | blame |
gmid* | commits | blame |
gmid.service | commits | blame |
renew-certs* | commits | blame |
vim/ |
README
This directory is for additional contributed files which may be useful. Dockerfile Sample Dockerfile to build alpine-based gmid images. gencert Simple shell script to generate self-signed certificates. gmid Sample rc(8) script for OpenBSD, to be placed in /etc/rc.d. gmid.service Simple systemd service file. renew-certs Flexible script meant to be run in a cronjob to watch for cert expiration. It can optionally regen the (self-signed) certificate in place and restart the server too. vim Syntax highlighting of gmid configuration for vim, to be placed into ~/.vim/ or /usr/share/vim/vimfiles/. To enable Syntastic checker, put this line in your vimrc: let g:syntastic_gmid_checkers = ['gmid']