From 54251acae34fe7d72f1f93a69158fbe16cc8a30e Mon Sep 17 00:00:00 2001 From: "C. McEnroe" Date: Mon, 28 Jun 2021 11:55:07 -0400 Subject: Move security to the features list The restrict option now enables real sandboxing on the two main target systems. --- README.7 | 33 ++++++++++++++++----------------- 1 file changed, 16 insertions(+), 17 deletions(-) diff --git a/README.7 b/README.7 index e68dd95..10730ab 100644 --- a/README.7 +++ b/README.7 @@ -1,5 +1,5 @@ .\" To view this file, run: man ./README.7 -.Dd May 4, 2021 +.Dd June 28, 2021 .Dt README 7 .Os "Causal Agency" . @@ -45,6 +45,16 @@ is highlighted. Ignore: visibility of filtered messages can be toggled. +.It +Security: +on +.Fx +and +.Ox , +the +.Cm restrict +option enables sandboxing +and limits filesystem access. .El . .Ss Non-features @@ -98,6 +108,11 @@ provided by either .Lk https://git.causal.agency/libretls/about LibreTLS (for OpenSSL) or by LibreSSL. +It targets +.Fx , +.Ox , +macOS +and Linux. .Nm and .Sy libtls @@ -107,22 +122,6 @@ Check the Repology pages for and .Lk https://repology.org/project/libretls/versions libretls . . -.Pp -.Nm -targets -.Fx , -.Ox , -macOS -and Linux. -On -.Ox , -.Xr pledge 2 -is used to limit system operations, -and with -.Nm Fl R , -.Xr unveil 2 -is used to limit filesystem access. -. .Bd -literal -offset indent \&./configure make all -- cgit 1.4.0 p;follow=1'>diff
path: root/bin/1sh/echo.c (unfollow)
Commit message (Expand)Author
2020-11-26Publish "Inability"June McEnroe
2020-11-26Render content into atom feedJune McEnroe
2020-11-26Update plan with different things I won't doJune McEnroe
2020-11-19Add "Come On Petunia"June McEnroe
2020-11-13Add x4 to LESSJune McEnroe
2020-11-04Remove modified sensitivity settingsJune McEnroe
2020-10-29Remove editJune McEnroe
2020-10-27Switch gr alias back to git rebaseJune McEnroe
2020-10-27Allow cd host: to cd to same path over sshJune McEnroe
2020-10-27Use SendEnv for cd host:pathJune McEnroe
2020-10-27Allow cd host:path over sshJune McEnroe
2020-10-07Use mandoc -T utf8 for text.June McEnroe
2020-09-20Add The Awakened KingdomJune McEnroe
2020-09-12Move /opt/local back, cheat port select to use system manJune McEnroe
2020-09-12Move /opt/local behind /usr againJune McEnroe
2020-09-12Enable toc in cgit renderings of man pagesJune McEnroe
2020-09-11Install mandoc on macOSJune McEnroe
2020-09-11Rewrite install script yet againJune McEnroe
2020-09-11Remove NetBSD from install scriptJune McEnroe
2020-09-11Use MacPorts rather than pkgsrcJune McEnroe
2020-09-11Add debian VM name to sshJune McEnroe
2020-09-11Add influencer tweetJune McEnroe
2020-09-10Add The Kingdom of GodsJune McEnroe
2020-09-07Add SunglassesJune McEnroe
2020-09-06Add Between the BreathsJune McEnroe
2020-09-04Open /dev/tty in nudgeJune McEnroe
2020-09-04Add nudgeJune McEnroe
2020-09-03Build fbclock with -lzJune McEnroe
2020-08-29Add tweets from retweetsJune McEnroe