Aleksa Sarai
Aleksa Sarai
This is related to opencontainers/runc#2151. In order to work around #286 and related issues, we have to generate inverse rules for all syscalls specified in our allow list. Unfortunately this...
There appears to have been some change on openSUSE (likely some new hardening flags for builds, or some glibc hardening) such that incorrect buffer handling results in a segfault even...
In several ways, multi-byte characters are not handled correctly by rtorrent's interface (you can download torrents that have utf8-encoded pathnames without issue, the issue is purely interface related but it...
This is the underlying issue causing docker/for-linux#743. It looks to me like the primary issue is that sysctls are applied before the UTS namespace is set up.
At the moment all of our internal packages are importable from anywhere. There are several historical reasons for this: * Docker originally used LXC, but then created a Go container...
With runC we have a special flag for `runc run` that enables/disables the creation of a new kernel keyring. The main reason we have the option is that older kernels...
Currently we only have `json:""` struct tags for all of our exported types. While this is fine, maybe we should consider adding some OCI struct tags that add some information...
While trying to implement `index.json` parsing in `umoci` I've come to a bit of a worrying realisation. There isn't really any explanation of how cases where `org.opencontainers.ref.name` is not unique...
[Rendered](https://github.com/cyphar/matrix-doc/blob/msc1997-totp-two-factor/proposals/1998-two-factor-providers.md) Implements: #1997 Signed-off-by: Aleksa Sarai
**NOTE**: You can work around this issue by using `unzip -S` which will disable all file path mangling in Info-ZIP which results in the raw UTF-8 string being used as...