Andrew LeFevre

It's not that I don't support doing certain things under certina user contexts, it's that Windows doesn't for security reasons. And if you want the tests to run properly you...

I just have to say, thanks so much for this, was exactly what I needed. You're my hero

Hey @zb140 I'm having an issue with the code in this PR, on a Windows 10 box with default file permissions, I'm getting a '0700' file mode from 'C:\Users' when...

It may not be your code; from some research I did it seems that `GetEffectiveRightsFromAcl` itself may be unreliable on some situations. Not completely sure though.

@francislavoie my bad, the example I posted above does work. This Caddyfile works to demonstrate the behavior I described above (based off of your simpler example): ``` http://localhost:9000 { @dockerAPI...

Thanks for the info, I'll try using that flag. I see via the docs that I can set flags for gvisor globally by modifying `/etc/docker/daemon.json`, but is it possible to...

Why are so many files added? Was that a mistake?

It's definitely possible, the config format would likely have to be updated as I'm sure you'd want the ability to specify what ICMP messages would be allowed or denied right?

I've never used macvlan networks, but that should be possible now. Try specifying the network for your output rules you want to limit to a single network and let me...

This should be possible, the only downside is the nftables rules could be viewed or modified by the root user in the Docker container, since the rules would be in...