Top all-time · #25100
Muhammad Shulhan
Personal blog · kilabit.info/journal · on HN as rv77axsystemsprogramming
Muhammad Shulhan's personal blog at kilabit.info covers systems and programming. Since 2017, 3 different Hacker News readers have linked it 3 times. No feed was found, so read it on the site itself.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
HN readers link Muhammad Shulhan's journal posts on Linux security and access control, such as chrooting SSH users into systemd-nspawn containers. The linked posts are cited as background on socket permissions and /tmp risks.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Personal website of Muhammad Shulhan, contains list of open source projects, articles on software engineering, talks, and journals.
What Hacker News says?
Yeah that helps but it depends on the permission of the socket. You can make it harder to guess by changing control path. Here’s an article that talks about tmp[0]. But I mean if you wanted to be really secure you could use systemd nspawn and put each user into their own container[1] [0] https://salvatoresecurity.com/the-many-perils-of-tmp/ [1] https://kilabit.info/journal/2022/chrooting_ssh_user_into_sy...
Comment linking /journal/2022/chrooting_ssh_user_into_systemd-nspawn/
on “PRoot: User-space implementation of chroot, mount –bind, and binfmt_misc”Submitted Re-Learning Slice (Golang) as a story · 3 points
HN discussionI use makefile as the library package dependency [1], maybe like what package.json was in node environment. The idea is if you want to use the library, you just include the makefile inside your project makefile, define a TARGET values and you will automatically have tasks for build, debug, etc. The key is a hack on .SECONDEXPANSION pragma of GNU make, which means it's only work in GNU/Linux environment. [1] https://…
Comment linking /projects/libvos/doc/index.html
on “Ask HN: In what creative ways are you using Makefiles?”