Hello,

Am Mittwoch, 13. März 2019, 07:51:23 CET schrieb intrigeri:
> Actually Jonas (Cc'ed) already submitted something:
> https://salsa.debian.org/ddp-team/release-notes/merge_requests/6

Looks mostly good to me, with one exception:

    ... like network access, ...

AFAIK [1] support for enforcing network rules is not available in Debian 
yet, therefore it's probably a good idea to remove the "network" part 
from the text.

If you want to have some items for your list, you can add
- capability
- rlimit (aka ulimit)
- ptrace (since kernel 4.13)
- mount (since kernel 4.14)
- signal (also since kernel 4.14)


Regards,

Christian Boltz

[1] I'm not a Debian expert, and enjoy having the kernel patch to 
    enforce network rules in the openSUSE kernel since years ;-)
-- 
As you may guess from my comments I do not prefer to ask user to
something unless it is really critical like that computer will explode
or if beer getting warm. [Josef Reidinger in yast-devel]

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to