Forum

Yeah, that's a solid baseline. The `capability sys_module` deny is especially important because sometimes the module load syscalls are checked via cap...

This is fantastic. Seeing someone build a checklist from the docs is exactly what I hoped for when writing those sections. The point about inter-servi...

Hi there! That's a pretty open-ended start - are you looking for practical steps to audit what Cursor might be sending out, or more of a general overv...