Svein Ove Aas comments

Results 115 comments of


                                            Svein Ove Aas

Add low integrity sandbox behind --enable-sandbox flag

Related: #11013 kinda does this on Linux. I just spotted your PR.

feat: Add Landlock LSM sandbox for filesystem isolation

The presubmit error is from .ci/windows_amd_base_files/README_VERY_IMPORTANT.txt, which is quite unrelated. You might want to exclude it from the test.

feat: Add Landlock LSM sandbox for filesystem isolation

Regarding custom modules: It might be reasonable to allow writes to, specifically, the custom_modules directory. That would allow automatic installation/updates, and also fix the RES4LYF issue (or similar). Still would...

Can't run Flowistry through rust-overlay

``` skv saya ~/dev/ganbot> direnv exec . rustc --version direnv: loading ~/dev/ganbot/.envrc direnv: using flake direnv: nix-direnv: Using cached dev shell Ganbot Rust development environment Rust version: rustc 1.91.0-nightly (523d3999d...

Can't run Flowistry through rust-overlay

```nix skv saya ~/dev/ganbot> cat flake.nix { description = "Ganbot - Multi-platform bot (Discord & IRC) built in Rust"; inputs = { nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable"; rust-overlay.url = "github:oxalica/rust-overlay"; flake-utils.url =...