|
|
|
|
|
|
by torginus
83 days ago
|
|
|
Why cant you ship with OverlayFS which actually enforces these restrictions? I have seen the AI break out of (my admittedly flimsy) guards, like doing simply safepath/../../stuff or something even more convoluted like symlinks. |
|
|