sydb☮x-1.2.0 is released with seccomp allowing readonly open{,at} w/o trace-stop, stricter defaults for all default sandbox modes but read, seccomp & ptrace seize usage defaulting to on & the shared memory writable restriction defaulting to on. Finally, this version implements an improved & simpler dump interface which the helper Pand☮ra can read to generate profiles for practical, daily applications such as mail client, browser etc. A sample profile for Firefox is added too! #exherbo #sydb☮x

⤋ Read More