feld on Nostr: oh nice thanks, so a combination of my apparmor profile to block /proc/*/mem and ...
oh nice thanks, so a combination of my apparmor profile to block /proc/*/mem and /proc/*/maps and neutering ptrace should be reasonably sufficient to prevent attackers from getting raw access to it
Published at
2023-08-06 16:26:16Event JSON
{
"id": "8d83af7243e712ef71343d60f729f6e81a1f2ce87b875c70cfb1bff75c915e40",
"pubkey": "262d5a8a8201b6e0804087a9d26929935c7ac6682875b13fe24a5314a04a6cbf",
"created_at": 1691339176,
"kind": 1,
"tags": [
[
"p",
"fa8a3ecc28f5281dcf43d9313788b894dff44fba05bc1fd1af3667248894bd59",
"wss://relay.mostr.pub"
],
[
"e",
"c4a0a7ba28d05a4d996b3d9d3408d22f37885812797c6bc6d0670954ed971dff",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://bikeshed.party/objects/457f68f9-fd69-4de2-86d8-d78c101916d7",
"activitypub"
]
],
"content": "oh nice thanks, so a combination of my apparmor profile to block /proc/*/mem and /proc/*/maps and neutering ptrace should be reasonably sufficient to prevent attackers from getting raw access to it",
"sig": "42d03a11c783932d34f537a27fcdb96c6ab21e52be7c11ab457d6d3bd146849c75c99591d12ea2af5f2069831cedf5601a98526e8ba786e6a25a72c993b58158"
}
