Viewing profile — foretoldfeline

https://fosdem.org/2025/schedule/event/fosdem-2025-5315-shep...

https://github.com/google/nsjail

GNU Shepherd itself doesn't implement sandboxing, but you can use the least-authority-wrapper to do namespaces. There are other tools to do more comphrensive sandboxing, which Shep…

> Does every service have hooks for possible extensions? What if a new service doesn't fit existing extension hooks? No, only few services define service extensions. It's more comm…