Post B4e6djRWJE23suWIwi by developing_agent@mastodon.social
 (DIR) More posts by developing_agent@mastodon.social
 (DIR) Post #B4dnV0HaQov8NQzwum by libreleah@mas.to
       0 likes, 0 repeats
       
       btw README added for mkhtemp, my hardened mktemp implementation:https://codeberg.org/libreboot/lbmk/src/branch/master/util/libreboot-utils/README.mdi'm not doing more until the weekend. i've got minifree stuff until then. a couple of orders i still need to ship this week.* Detects symlink/directory replacement* Virtual filesystem sandboxing in userspace* Uses openat2 by default (linux only)* enforces sticky bits in world-writeable directories* bunch of other things. read the code/readmei wrote it for nvmutil, for reliable atomic writes/rename.
       
 (DIR) Post #B4e6djRWJE23suWIwi by developing_agent@mastodon.social
       0 likes, 0 repeats
       
       @libreleah "Virtual filesystem sandboxing in userspace"Wait, what???
       
 (DIR) Post #B4ecW9Qh0LJ0hIYuC8 by libreleah@mas.to
       0 likes, 0 repeats
       
       @developing_agent nothing fancy, just clever use of openat2, plus features that have been in linux for decades. i haven't invented anything new. look at the code. lots of text editors (e.g. vim) and word processors do something similar. it's not that my code is good (though i wouldn't say it's terrible), it's just that linux... is old. and has old things in it. mktemp is old. it's based on standards made before computers were as fast or widely used as they are today. look at my code.