Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
atlas 18e4f195e5 hive-priv: refuse injecting strings in the limits drop-in and the container conf ... memory_max and cpu_quota are checked against the shapes systemd takes before write_resource_limits makes any file. validate_bind_path also refuses whitespace, control bytes, backslash, dollar and backtick, which the start script expands unquoted in EXTRA_NSPAWN_FLAGS. bridge must be an interface name and gateway_ip an IPv4 literal. Each refusal names its field. Closes #6086		2026-11-06 10:06:11 +01:00
..
boundary.md	document the user namespace opt-in	2026-11-01 17:06:18 +01:00
security.md	hive-priv: refuse injecting strings in the limits drop-in and the container conf	2026-11-06 10:06:11 +01:00