Skip to content

Instantly share code, notes, and snippets.

View rusty-snake's full-sized avatar
🔮

rusty-snake

🔮
View GitHub Profile
@rusty-snake
rusty-snake / .gitignore
Last active July 20, 2025 06:52
Bypass seccomp-bpf based memory-deny-write-execute with `READ_IMPLIES_EXEC`
/target
@rusty-snake
rusty-snake / .gitignore
Last active May 29, 2025 16:57
Bypass seccomp-bpf based `socket(2)` restrictions with `io_uring`
/target
@rusty-snake
rusty-snake / xdg-open.c
Last active March 28, 2025 16:29
xdg-open.c – A xdg-open drop-in wrapper to make xdg-open work nicely with firejail.
/*
* Copyright © 2021 rusty-snake
*
* Permission is hereby granted, free of charge, to any person obtaining a copy
* of this software and associated documentation files (the "Software"), to deal
* in the Software without restriction, including without limitation the rights
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
* copies of the Software, and to permit persons to whom the Software is
* furnished to do so, subject to the following conditions:
*
@rusty-snake
rusty-snake / firejail-check-blacklist.rs
Last active October 20, 2024 07:38
Check for every noblacklist in firejail profiles a corresponding blacklist exists
/*
* Copyright © 2019 rusty-snake <print_hello_world+License@protonmail.com>
*
* Permission to use, copy, modify, and distribute this software for any
* purpose with or without fee is hereby granted, provided that the above
* copyright notice and this permission notice appear in all copies.
*
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
@rusty-snake
rusty-snake / firejail_seccomp_notify.sh
Last active October 20, 2024 07:32
firejail_seccomp_notify.sh - Notification on Seccomp violations, useful for debugging
#!/usr/bin/env bash
# Copyright © 2019,2020 rusty-snake
#
# Permission to use, copy, modify, and distribute this software for any
# purpose with or without fee is hereby granted, provided that the above
# copyright notice and this permission notice appear in all copies.
#
# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
@rusty-snake
rusty-snake / firejail_blacklist_violation_notify.sh
Last active October 20, 2024 07:32
firejail_blacklist_violation_notify.sh - Notifications on blacklist violations, useful for debugging
#!/usr/bin/env bash
# Copyright © 2019,2020 rusty-snake
#
# Permission to use, copy, modify, and distribute this software for any
# purpose with or without fee is hereby granted, provided that the above
# copyright notice and this permission notice appear in all copies.
#
# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
@rusty-snake
rusty-snake / systemd_cmds.md
Created December 21, 2019 16:55
systemd commands

systemd commands

systemd

CMD DESC
busctl Introspect the bus.
coredumpctl List or retrieve coredumps from the journal.
@rusty-snake
rusty-snake / seccomp_load_debug.rs
Created August 11, 2024 11:54
LD_PRELOAD library to export the seccomp-bpf filter when it is loaded.
// SPDX-License-Identifier: MIT
/*
* Copyright © 2023,2024 rusty-snake
*
* Permission is hereby granted, free of charge, to any person obtaining a copy
* of this software and associated documentation files (the "Software"), to deal
* in the Software without restriction, including without limitation the rights
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
* copies of the Software, and to permit persons to whom the Software is
@rusty-snake
rusty-snake / seccomp_init_btree.rs
Last active June 3, 2023 11:56
LD_PRELOAD library to change the default optimization level of libseccomp to build btree optimized filters.
// SPDX-License-Identifier: MIT
/*
* Copyright © 2023 rusty-snake
*
* Permission is hereby granted, free of charge, to any person obtaining a copy
* of this software and associated documentation files (the "Software"), to deal
* in the Software without restriction, including without limitation the rights
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
* copies of the Software, and to permit persons to whom the Software is
@rusty-snake
rusty-snake / maintenance-status.md
Last active May 30, 2022 20:12
Proposal to easily show the maintenance status of a project.

maintenance status

maintenance-status: passively-maintained version: 3.1.0

Proposal to easily show the maintenance status of a project.

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be