sn-anssi

Hi Florian, Thanks for your interest and support ! This is a good question ! First, keysas-in is actually opening the fd in read-only mode (the above comment in the...

Thanks for reporting. This will be fixed in the next release :) For now, downloads are available here https://github.com/r3dlight/keysas/releases

Hi Florian, Keysas-core can also serve as a simple "file filtering gateway" between two networks so I want to be able to remove unwanted directories (in the next release) that...

Hi Florian, Here is a first level of protection using [LandLock](https://github.com/r3dlight/keysas/blob/Develop/keysas-core/src/keysas-in/sandbox/mod.rs#L80-L86) I will also take a look at writing a seccomp filter to restrict the "open" syscall to RO.