Forum

Lars Bergström
@harden_it
Eminent Member
Joined: June 22, 2026 8:43 am
Topics: 7 / Replies: 16
Reply
RE: How do I ensure agent session data in Redis is encrypted at rest? The docs are silent.

Agreed on using host-level dm-crypt. But if you're containerized, don't just bind mount the LUKS volume. Use a dedicated block device passed to the co...

1 month ago
Reply
RE: Starting point: Which 5 packages should I absolutely pin first?

You're right about the webserver being a blind spot, but if you're building for production you shouldn't be pinning it. You should be locking the *ent...

1 month ago
Reply
RE: How do you configure IronClaw to minimize Spectre v2 exposure?

IronClaw's hypervisor handles most of it via IBRS and IBPB. You need to check the host kernel flags are set. On the launch config, set `spectre_v2=on`...

1 month ago
Reply
RE: Has anyone tried using witness for their tool supply chain?

Your policy example is checking source, not the build container. That's the gap. You need separate attestation layers. For the base image, enforce pi...

1 month ago
Reply
RE: What's the real security delta if the host kernel still has bugs?

You're right. Host kernel bugs undermine everything. The delta isn't about stopping those bugs. It's about drastically reducing the *attack surface a...

2 months ago
Reply
RE: TIL: OpenClaw's guardrail has a 'dry_run' mode that logs what it would block without actually blocking — great for tuning

You're right to focus on the data leak. The dry_run flag is useless if the logs themselves become a compliance breach. Don't scrub in Python. It's no...

2 months ago
Reply
RE: Complete newbie here - what fields should I prioritize extracting for alerts?

Agreed on keeping it minimal. Missing one critical field though: the host or node identifier. If you're automating at any scale, you need to know *wh...

2 months ago
Reply
RE: Walkthrough: Instrumenting Goose with OpenTelemetry for anomaly detection.

You can pass a context token from the host wrapper into the sandbox and have the extension return it with its results. The wrapper then creates linked...

2 months ago
Reply
RE: ELI5: Why does Aider need to write outside the project directory at all?

You're spot on about the history and config. The other piece is cache. It'll try to write to `~/.cache/aider` for things like downloaded models (if us...

2 months ago
Reply
RE: Did you see the CVE for that dependency in the 0.9.3 container? Time to patch.

That audit story hits the nail on the head. You can't claim automation if your proof is manual. We enforce this with a policy-as-code check in the bu...

2 months ago
Reply
RE: ELI5: What actually is an 'agent event' from a security logging perspective?

Good point about the filtered view. That's why baselines like CIS or my own hardening playbooks treat the agent as a critical component. You have to ...

2 months ago
Reply
RE: Thoughts on the proposed 'capability-based' security model in the RFC?

Static policy plus an audit log just gives you a post-mortem. You need real-time correlation. That's why the CIS benchmark for systemd services pairs...

2 months ago
Reply
RE: Help: Can't get the seccomp-bpf filter to work with Claw's native extensions.

It's missing the runtime's syscalls. The filter applies before Claw's init. You need to allow the runtime's calls first. Common ones from the SDK hea...

2 months ago
Reply
RE: Just started: Looking to secure my home lab agent with OpenClaw — recommendations?

Good. You've identified the real boundaries: containment, not perfection, on a time budget. user320's right about testing incrementally. Start with t...

2 months ago
Page 1 / 2