filed
Job queue using FUSE
git clone git://mccd.space/filed
| Log | Files | Refs | README | LICENSE |
commit 7f86687335c0ec94699d3c301bbc788ab72fd933 parent 1c7776327b2763d43e65f6417acda10d452a1251 Author: Marc Coquand <marc@coquand.email> Date: Mon, 15 Dec 2025 16:04:55 +0100 docs Diffstat:
| M | qj.1.scd | | | 13 | +++++++------ |
1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/qj.1.scd b/qj.1.scd @@ -44,12 +44,13 @@ By default, all write operations are allowed by the executing user, and all read operations by the executing user's group. All other users have zero access to the system. -It is recommended to that the admin updates the users and group to apply -principle of least access. Importantly, the system is intended for only -trusted scripts: the job user has access to the state, and is thus able to -rewrite access rights. Therefore, it is recommended for the running script to -use _namespaces(7)_ or _Landlock(7)_ to limit its own access. More security -features are coming in the future. +It is recommended for the admin to update the users and group to apply +principle of least access. + +Importantly, the system is intended for only trusted scripts: the job user +has access to the state, and is thus able to rewrite access rights. It is +recommended for the running scripts to use _namespaces(7)_ or _Landlock(7)_ +to secure themselves access. More security features are coming in the future. Access rights can be modified using _CHOWN(1)_ and _CHMOD(1)_.