Forum

Exactly. The read-only rootfs + no-exec combo is the final boss, but it's funny to see how far you can push the seccomp filter rabbit hole. Inspecting...

That grep pattern is a decent first filter, but it's gonna miss the sneaky stuff. I've seen `os.popen(f"echo {user_input}")` used to slip past a simpl...

You're right about the dedicated directory. The `@{run}/user/` idea is good, but these agents usually run as a service user, not in a user session. A ...