setpriv on Linux supports Landlock.
Another example:
$ setpriv \
--landlock-access fs \
--landlock-rule path-beneath:execute,read-file:/bin/ls-static \
--landlock-rule path-beneath:read-dir:/tmp \
/bin/ls-static /tmp/tmp/xorg.atom
The first argument --landlock-access fs says that nothing is allowed.
--landlock-rule path-beneath:execute,read-file:/bin/ls-static says that reading and executing that file is allowed. Itâs a statically linked ls program (not GNU ls).
--landlock-rule path-beneath:read-dir:/tmp says that reading the /tmp directory and everything below it is allowed.
The output of the ls-static program is this line:
ârwârâârââââx 3000 200 07-12 09:19 22'491 â /tmp/tmp/xorg.atom
It was able to read the directory, see the file, do stat() on it and everything, the little x indicates that getting xattrs also worked.
3000 and 200 are user name and group name â they are shown as numeric, because the program does not have access to /etc/passwd and /etc/group.
Adding --landlock-rule path-beneath:read-file:/etc/passwd, for example, allows resolving users and yields this:
ârwârâârââââx cathy 200 07-12 09:19 22'491 â /tmp/tmp/xorg.atom
** My measurer **
My dad is an electrical engineer and physicist. Measuring things is a core part of his professional life, and something he seems to spend a lot of time doing around the house. This is all to say my dad is relatively expert in the ways of measuring things so I think itâs hilarious that he calls absolutely anything he is using to measure anything elseâmy measurer.â Measuring tape, oscilloscope, scale, volt meter, bubble level, table spoons, whatever. Theyâre allâmy measurer.â â Read more
Saw this on Mastodon:
https://racingbunny.com/@mookie/114718466149264471
18 rules of Software Engineering
- You will regret complexity when on-call
- Stop falling in love with your own code
- Everything is a trade-off. Thereâs no âbestâ 3. Every line of code you write is a liability 4. Document your decisions and designs
- Everyone hates code they didnât write
- Donât use unnecessary dependencies
- Coding standards prevent arguments
- Write meaningful commit messages
- Donât ever stop learning new things
- Code reviews spread knowledge
- Always build for maintainability
- Ask for help when youâre stuck
- Fix root causes, not symptoms
- Software is never completed
- Estimates are not promises
- Ship early, iterate often
- Keep. It. Simple.
Solid list, even though 14 is up for debate in my opinion: Software can be completed. You have a use case / problem, you solve that problem, done. Your software is completed now. There might still be bugs and they should be fixed â but this doesnât âaddâ to the program. Donât use âsoftware is never doneâ as an excuse to keep adding and adding stuff to your code.
On my blog: Real Life in Star Trek, Interface https://john.colagioia.net/blog/2025/06/12/interface.html #scifi #startrek #closereading
6.12.33: longterm
Version:6.12.33 (longterm)Released:2025-06-10Source:linux-6.12.33.tar.xzPGP Signature:linux-6.12.33.tar.signPatch:full ( incremental)ChangeLog:ChangeLog-6.12.33 â Read more
Coffee prices up to $12 needed to make industry viable, supplier says
US tariffs and supply issues are creating uncertainty for an already strained coffee market, and roasters say itâs only a matter of time before Australians will pay more for their brew. â Read more
** More stink **
I read A Court of Throne and Roses this weekend. Not my usual fare but what the heck it was there so I read it. I found it to be an unremarkable, relatively conservative romantasy.
What stood out to me, though, is that everyone is so stinky. The main character is always describing how folks smell, smelling them before they round a corner and stuff. Even if they donât like smell bad, this setting seems overwhelming perfumed. â Read more
Trump signs proclamation banning travel from 12 countries, including Myanmar â Read more
Ukrainian Navy downs 12 Russian Shahed drones overnight â Read more
Matica slovenskå v Srbsku volà nové vedenie
Rok 2025 je pre Maticu slovenskĂș v Srbsku (MSS) volebnĂœm rokom. V sobotu 31. mĂĄja 2025 o 12.00 hodine sa v sieni SlovenskĂ©ho vojvodinskĂ©ho divadla v BĂĄÄskom Petrovci uskutoÄnĂ XXX. riadne vĂœroÄnĂ© a zĂĄroveĆ aj volebnĂ© zasadnutie ZhromaĆŸdenia MSS. Na zasadnutĂ budĂș zvolenĂ© novĂ© orgĂĄny vedenia â predseda, podpredsedovia a Älenovia Dozornej rady. Napriek formĂĄlnemu priebehu predvolebnĂ©ho procesu, medzi ÄasĆ„ou matiÄiarov a verejnosti ⊠â Read more
6.12.31: longterm
Version:6.12.31 (longterm)Released:2025-05-29Source:linux-6.12.31.tar.xzPGP Signature:linux-6.12.31.tar.signPatch:full ( incremental)ChangeLog:ChangeLog-6.12.31 â Read more
Russia launches warâs largest air attack on Ukraine, kills at least 12 people â Read more
German Foreign Minister Johann Wadephul called for additional EU sanctions against Russia on May 25 following Russiaâs large-scale overnight attack on Ukraine that killed 12 and injured 79. â Read more
My baby turned 12! Iâm so happy with him in my life â Read more
Canada: Conservatives flip Liberal seat following judicial recount by just 12 votes â Read more
bruh i log in after a day and my TL/discover feed has 12 twts WHAT AM I MISSING
Boardcon Idea3576 SBC Showcases RK3576 SoC with CAN Bus and Dual Gigabit Ethernet
Boardcon has recently introduced the Idea3576, a compact single-board computer built around the Rockchip RK3576. Key features include CAN, RS485, 4G connectivity, and support for Debian 12. The SoC features an octa-core configuration with four Cortex-A72 cores clocked at 2.2GHz and four Cortex-A53 cores at 1.8GHz, enabling a hybrid big.LITTLE setup. It also integrates a [âŠ] â Read more
On my blog: Toots 𩣠from 05/12 to 05/16 https://john.colagioia.net/blog/2025/05/16/week.html #linkdump #socialmedia #quotes #week
Tertulia de Dieter: La niña de 12 años que fue prostituida cuando estaba a cargo de la Generalidad de Cataluña
Alejandro Vara, Carlos Cuesta y Pablo Planas comentan el caso que ha destapado una red de captaciĂłn de fondos pĂșblicos que afectaba a ERC. â Read more
Enterprise-Ready MCP
Iâve seen a lot of complaints about how MCP isnât ready for the enterprise. â Read more
Academia Caballero: Las pelĂculas y el deporte
Dieter conversa con Garci y PetĂłn sobre el cine de John Ford, las victorias deportivas españolas, y sobre el Papa LeĂłn XIV. â Read more
Tertulia de Dieter: Los mensajes de SĂĄnchez y Ăbalos
Alejandro Vara, Pepe GÂȘ DomĂnguez y Mario Noya comentan la relevancia de los whatsapp filtrados a El Mundo y el papel de Ăbalos en el Gobierno. â Read more
Resumen de las 20:30: Tres magistrados del TC piden paralizar la tramitaciĂłn de los recursos contra la ley de amnistĂa
Dieter y su equipo resumen toda la actualidad. â Read more
En este paĂs llamado España: Su ministro Jose
Dieter Brandau analiza los mensajes entre Pedro SĂĄnchez y JosĂ© Luis Ăbalos desvelados por el diario El Mundo y entrevista a Esteban Urreiztieta. â Read more
MacOS Sequoia 15.5 Update Released with Bug Fixes & Security Enhancements
MacOS Sequoia 15.5 is now available as a software update for Mac users running the Sequoia operating system. The system software update includes bug fixes and security enhancements, but does not appear to include any new features or other major changes. Additionally, Apple has also released MacOS Ventura 13.7.6 and macOS Sonoma 14.7.6 for Mac, ⊠[Read More](https://osxdaily.com/2025/05/12/macos-sequoia-15-5-update-downlo ⊠â Read more
iOS 18.5 Update Released for iPhone & iPad with Bug Fixes & Security Enhancements
iOS 18.5 for iPhone and iPadOS 18.5 for iPad have been released by Apple. According to the release notes accompanying the update download, the software updates primary focus is the introduction of a new Pride Harmony LGBTQ wallpaper. Additionally, parents will now receive a notification when the Screen Time passcode is used on a childs ⊠[Read More](https://osxdaily.com/2025/05/12/ios-18-5-update-iphone-ip ⊠â Read more
The Barbican
Article URL: https://arslan.io/2025/05/12/barbican-estate/
Comments URL: https://news.ycombinator.com/item?id=43964136
Points: 500
# Comments: 173 â Read more
On my blog: Developer Diary, International Nurses Day https://john.colagioia.net/blog/2025/05/12/nurses.html #programming #project #devjournal
next-20250512: linux-next
Version:next-20250512 (linux-next)Released:2025-05-12 â Read more
Un dernier quintile de plus en plus dangereux
Câest bien connu : sĂ©curiser les champs ĂlysĂ©es, câest vraiment compliquĂ©. Une foule qui sây rendrait de façon totalement inopinĂ©e deviendrait vite absolument ingĂ©rable, Ă moins de porter un gilet jaune auquel cas, la sĂ©curisation des lieux ne serait finalement quâune pure question de logistique et de nombre de balles disponibles dans les flashballs. Or, le [âŠ] â Read more
10 Popular Songs That Are Surprisingly About Drugs
Nothing is better than a good love song or an upbeat summer hit, but sometimes those songsâ meanings can be quite deceiving. There is an endless supply of popular songs that are clearly about drugs, but some are not quite so obvious. From artists like Ed Sheeran to TLC, these artists have released music that [âŠ]
The post [10 Popular Songs That Are Surprisingly About Drugs](https://listverse.com/2025/05/12/10-popular-songs-that-are ⊠â Read more
According to a very old email one of my more personal family domains was registered in 2013 making it 12 years old, so I was closed đ€Ł my public facing one is much much older đ€Ł
Tea & Peaches: KubeCon + CloudNativeCon London Recap, Atlanta Sneak-Peek
KubeCon + CloudNativeCon Europe 2025 in London was nothing short of historic. As the biggest KubeCon to date â with 12,418 attendees, including 46% first-timers â it was a moment of celebration, reflection, and connection for⊠â Read more
Globe Safety
â Read more
Stiles worked a long, 12-hour shift â Read more
Globe Safety
â Read more
How to build a fleet of networked offsite backups using Linux, WireGuard and rsync
Comments â Read more
Pinellas County Running - Long run: 8.00 miles, 00:09:07 average pace, 01:12:50 duration
last long run of the training plan. legs were heavy again today. first half hour had a nice sprinkling going on but that humidity crept right in afterwards. more tired than i should be and need to try and keep these next few runs light
#running
@javivf@adn.org.es 12 Hlirs without power? đ§ Where do you reside?! đ€Ł
Finally I propose that we increase the Twt Hash length from 7 to 12 and use the first 12 characters of the base32 encoded blake2b hash. This will solve two problems, the fact that all hashes today either end in q or a (oops) đ
And increasing the Twt Hash size will ensure that we never run into the chance of collision for ions to come. Chances of a 50% collision with 64 bits / 12 characters is roughly ~12.44B Twts. That ought to be enough! â I also propose that we modify all our clients and make this change from the 1st July 2025, which will be Yarn.socialâs 5th birthday and 5 years since I started this whole project and endeavour! đ± #Twtxt #Update
Knoxville Long Run: 12.00 miles, 00:09:47 average pace, 01:57:23 duration
no clue where i was going. found something called dogwood trail so just followed the arrows and tried not to stress the hills.
#running