Skip to content
Snippets Groups Projects
Select Git revision
  • add-metadata-cleaner-link
  • fix-key-error-for-svg-without-xmlns
  • master default protected
  • factorize
  • ppt
  • patch-1
  • pdf_depth
  • fix_testsuite
  • add_wav_support
  • please_mypy
  • improve_zip
  • improve_images
  • improve_svg
  • inverted_backup
  • bak
  • elementary-contract
  • implement_lightweight_mode_msoffice
  • 0.11.0
  • 0.10.1
  • 0.10.0
  • 0.9.0
  • 0.8.0
  • 0.7.0
  • 0.6.0
  • 0.5.0
  • 0.4.0
  • 0.3.1
  • 0.3.0
  • 0.2.0
  • 0.1.3
  • 0.1.2
  • 0.1.1
  • 0.1.0
33 results
Blame Permalink
Forked from jvoisin / mat2
Source project has a limited visibility.
  • madaidan's avatar
    58773088
    Mount a new tmpfs on /tmp and drop all capabilities · 58773088
    madaidan authored and jvoisin's avatar jvoisin committed 
    This mounts a new tmpfs on /tmp so any files residing there would be hidden
from the sandbox. Many programs store some files in there that might be useful
to an attacker.  It also drops all capabilities incase it is ever run with
extra capabilities for whatever reason.
    58773088
    History
    Mount a new tmpfs on /tmp and drop all capabilities
    madaidan authored and jvoisin's avatar jvoisin committed 
    This mounts a new tmpfs on /tmp so any files residing there would be hidden
from the sandbox. Many programs store some files in there that might be useful
to an attacker.  It also drops all capabilities incase it is ever run with
extra capabilities for whatever reason.