apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-06-12 19:55:14 +02:00
Code Issues Projects Releases Packages Wiki Activity

feat(dynamic, eval): enhance hardening validation, CI budget tuning, and source-keyed target-dir isolation

Browse source
This commit is contained in:
elipeter 2026-06-03 07:35:57 -05:00
parent 2e456c15d1
commit c2cd6f009e
12 changed files with 234 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

6
src/dynamic/sandbox/process_linux.rs
View file

@ -589,8 +589,10 @@ pub fn install_pre_exec(
}
fn run_pre_exec_in_child(plan: &PreExecPlan) -> HardeningOutcome {
let mut outcome = HardeningOutcome::default();
outcome.profile = plan.profile;
let mut outcome = HardeningOutcome {
profile: plan.profile,
..Default::default()
};
let ablation = plan.ablation.unwrap_or_default();
// ── Always-on: PR_SET_NO_NEW_PRIVS + RLIMIT_AS ───────────────────────