Rui Pinheiro

@rhizome From what I understand, it's because blogit depends on acts-as-taggable-on ~> 3.5.0, which is incompatible with Rails 5. As such, for blogit to be compatible with Rails 5, the...

Can't docker mount its filesystems as nosuid?

I thought they could. For example, [this article](http://www.projectatomic.io/blog/2014/08/is-it-safe-a-look-at-docker-and-security-from-linuxcon/) mentions: ``` if you’re worried about normal apps escalating from non-root to root, "defang" SUID binaries by removing the SUID bit and/or...

Assuming we trust the docker image not to interfere, for example the only attacks we are worried about would come from outside WHILE using the sandboxed application (for example, browser...

I added this to my dockerfile, right at the end: ``` # Remove SUID bits RUN for i in `find / -not \( -path /proc -prune \) -perm +6000 -type...

Isn't it possible to simply run `docker pull` and, if the image has been updated, rebuild the whole container? This check could be added to the `subuser update` command. [This...

I'm on NVIM v0.3.2-962-g231de7253 and vim-gutentags 93616e4c0ccfafe52ae329c7dd220d7b5c7d5f80 (latest master at the time of writing) and I still see this issue. `set fsync?` reports `nofsync`. Any ideas? I can help test...

The issue is that Flask-Ask requires cryptography v2, which is not compatible with OpenSSL 3. To get everything to work, you need to force the usage of cryptography 3. You...

Can you confirm the version of Foundry and libWrapper you are using? Also, does anything show up in console if you set the libWrapper verbosity to Debug in the settings...

I can't take a better look right now, but I notice from the log you are wrapping this method quite late. There is a known implementation detail with Foundry where...