David Leadbeater

@cyphar I think even with ambient capability support this is a bit tricky to do right, as a username is (potentially) passed all the way through and ambient capabilities have...

@rata said: > The annotation: io.kubernetes.cri-o.cgroup2-mount-hierarchy-rw doesn't work with userns AND privileged containers To confuse matters further, that annotation actually isn't needed in some cases -- because cri-o looks for...

In your podman-init.sh try adding at the end: ``` cat /proc/self/cgroup echo creating cgroup namespace exec unshare -C sh -c 'cat /proc/self/cgroup; ls -ld /sys/fs/cgroup' ``` You'll obviously need the...

See https://github.com/zadewg/RIUS for some background on this attack against various IM clients.

Came across this as I'm fixing another verification issue; `normalized_host` in addressable will return punycode (`xn--...`) for IDN names. So there's no Unicode concern there (as one side is guaranteed...

@machine424 this one is specific to `test rules`. It's not quite the same as that issue, as it's allowing referencing "/dev/stdin" in the test data itself, rather than whether no...

Thanks, updated. > Should we mention this in the docs Yes, I've added a bit to the docs.