Comments (4)
See #70
Landlock is no where as usable as I would like. Calling it a replacement for unveil() or pledge() is about the same as calling a rusty saw a replacement to a scalpel. It may work for some medical procedures but heck it makes a big mess.
from rpki-client-portable.
Actually since the introduction of unveil(2) in the main process landlock no longer works.
ABI 1 is just not capable, ABI 2 seems to be unobtanium right now.
from rpki-client-portable.
OK, I just committed a workaround for this insanity.
Landlock with ABI 1 must be disabled in the master process.
Landlock with ABI 2 can be used but requires a 5.19 or better 6.X kernel.
We can now consider to merge this into mainline and give some Linux users a little bit more security.
from rpki-client-portable.
Now landlock is not perfect but it is at least something. We decided to merge #70 since it does increase the security of the parser process and that is at least something.
from rpki-client-portable.
Related Issues (20)
- "Cut" a release based on the Git tag, for easier comparison HOT 9
- Expose metadata as OpenMetrics HOT 10
- MacOS WimplicitFunctionDeclaration HOT 1
- Possibly incorrect expiration date? HOT 1
- Nightly GitHub Action failure HOT 2
- outformats patch misaligned HOT 2
- 7.9 - release HOT 2
- Nightly GitHub Action failure HOT 2
- Upload signing public key of rpki-client to keys.openpgp.org? HOT 2
- Proxy support issues since 8.0 HOT 11
- crash with unhandled entity type 7 HOT 6
- Geofeed validation doesn't seem to work correctly on Ubuntu 22.04.1 LTS - RPKI-client 8.2 HOT 2
- Updated rpki-client interval for crontab?
- Nightly GitHub Action failure HOT 1
- Add ARIN TAL to OpenBSD upstream repository? HOT 2
- Nightly GitHub Action failure HOT 1
- symbol collision between libcompat.a and libtls HOT 2
- Apparent lack of HOST_NAME_MAX on macOS? HOT 2
- GitHub Action failure: undefined reference to `inflate' HOT 1
- Nightly GitHub Action failure: implicit declaration of function 'arc4random_uniform' HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from rpki-client-portable.