Skip to content

Forum

Maria Kowalski
@dev_sec_maria
Active Member
Joined: June 22, 2026 1:40 pm
Topics: 0 / Replies: 14
Reply
RE: How do I prevent a tool from forking or spawning child processes?

You can set a container runtime seccomp profile, but then you're baking that restriction into the entire container. If this is a single problematic bi...

13 hours ago
Reply
RE: Breaking: Major vuln found in Claw family message queue - patched yet?

You're right about the black box. We're asking for internal metrics from a process we can't see. But that's exactly why the procurement questionnaire...

5 days ago
Reply
RE: Anyone else having issues with containerized agents losing state and retrying unsafe actions?

The cloud API problem is the real killer. You can solve the local lock, but if the external state changed, you're stuck. Our team enforces a pattern ...

5 days ago
Reply
RE: How do I get started with Firecracker for agent isolation?

You hit the nail on the head with the "why." Most people skip that and jump straight to configs. The delta over a locked-down container is small unles...

5 days ago
Reply
RE: What is the best way to do rolling updates of enclave hosts without causing attestation storms?

The decoupling you mentioned is key. But your attestation service accepting a *range* is just the policy side. You need to bake the migration logic in...

6 days ago
Reply
RE: Switched from a single monolithic log to separate streams for tools, decisions, and context. Here's why.

Agreed on micro-segmentation. But separate VLANs or tunnels only help if your collectors are on different physical hosts. If all three collectors are ...

6 days ago
Reply
RE: Showcase: My 'lint' script that validates SuperAGI config files against a security baseline.

Yeah, the quickstart guides are always the worst. They optimize for "works on my machine" over security. > Any chance you'd be willing to share th...

6 days ago
Reply
RE: Just built a security linter that scans CrewAI configs for unsafe defaults

It's not just the hooks. Even if you have a validation hook, you need immutable audit of what was *attempted* to be injected. If your pre-execution c...

7 days ago
Reply
RE: How do I audit the permissions of a custom tool I wrote?

Your manual checks are a good start but you're right, they're brittle. You need to audit the actual runtime calls, not just static permissions. Look ...

1 week ago
Reply
RE: Switched from AppRole to Kubernetes auth. Simplified our Helm charts a lot.

Right. The log change was the first thing we fixed. AppRole logs are full of secret pulls. Now it's all about the `vault.token.lookup` on the service ...

1 week ago
Reply
RE: Step-by-step: auditing a Python tool dependency chain before adding to OpenClaw

You missed a step. Use `pip download --no-deps` first, then inspect the actual wheel/sdist file before it ever touches your environment. That `--no-de...

1 week ago
Reply
RE: Walkthrough: Adding mandatory approval gates for specific high-risk tools.

It's not about code execution already happening. It's about the blast radius. If an attacker gets a foothold on a node, yes, network controls matter....

1 week ago
Reply
RE: OpenClaw vs IronClaw — does the enclave layer really add security?

You're missing the point of the enclave. It's not for isolation from a trusted host. Your systemd-run config is great for resource control, but it's ...

1 week ago
Reply
RE: ELI5: what does each syscall restriction in a seccomp filter actually buy you?

Exactly. That's why you block clone, clone2, clone3, and unshare as a set. A forked child inherits the parent's seccomp filter, but if you let it open...

1 week ago