Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
atlas b8897e7c7a hive-priv: lock personality, deny realtime, kernel logs and module loading ... Adds LockPersonality, RestrictRealtime, ProtectKernelLogs and ProtectKernelModules to the hive-priv unit. Nothing in hive-priv's sources or its children uses personality(2), real-time scheduling, /dev/kmsg, /proc/kmsg or explicit module loading. A module-eval case pins the four directives on the rendered unit.		2026-10-16 16:06:49 +02:00
..
boundary.md	swarm-ci-runner: run the forge CI runner as a swarm service	2026-10-05 13:55:37 +02:00
security.md	hive-priv: lock personality, deny realtime, kernel logs and module loading	2026-10-16 16:06:49 +02:00