clawoflight/aursec

aursec-hash: Find the optimal firejail ruleset

clawoflight opened this issue · 4 comments

clawoflight commented

We need to minimize the danger of sourcing the PKGBUILD.
That means that we need to triple-check the firejail rules and actively try to break out until we are satisfied.

clawoflight commented

This is much easier since I added 713c762 :)

Lifree commented

can this be closed by bbf247d ?

clawoflight commented

I would say no, because there might be even more things to protect against.
Now that the tests work, the fun part of pentesting can begin :D

clawoflight commented

Some more ideas:

  • Make sure that cloning vcs sources works, but limit other network traffic