Simon Wachter

If the version at https://play-with-biscuit.cleverapps.io/ is up-to-date, the `#authority` and `#ambient` restrictions can easily be bypassed by any party able to create a new block. This in turn allows to...

@Geal Given the `Files` example, without touching the authority and first block, adding the following block results in `Success` for all values of `resource(#ambient, *)` and `operation(#ambient, *)` in the...

@Geal I don't mind, thanks for asking. Glad to hear it got fixed fast.

See android-password-store/pass-test#1 for the requested testing files.

Regarding priority between file and folder, managing a `-C` check flag, and other related concerns, the classic approach is always having a file (`/etc/doas.conf`) as an entrypoint with some kind...

It appears cert-manager is already building a full chain into `tls.crt`. The issue is that root (self-signed) certificates are omitted from the chain: https://github.com/cert-manager/cert-manager/blob/356f7411e0b6d3d16aca2169c05337c2f664e1bc/pkg/util/pki/parse_certificate_chain.go#L168-L172

Well, I guess it somewhat gets in the way of this feature request, don't you think? Some use-cases would benefit from a way to selectively disable that behavior.

Stumbled upon the same problem. Turned out it was using libmagick7 when this tool seem to have been written for version 6.

For repro, the font is [a patched `Iosevka` from nerd fonts](https://github.com/ryanoasis/nerd-fonts/releases/download/v3.1.0/Iosevka.tar.xz).

```console $ rio --version rioterm 0.0.33 $ uname -a Linux thehost 6.6.9-arch1-1 #1 SMP PREEMPT_DYNAMIC Tue, 02 Jan 2024 02:28:28 +0000 x86_64 GNU/Linux ``` ~/.config/rio/config.toml ```toml # Cursor # #...