Artifact 0b45f8fedcf90a565fcd4c9106c04375ac7d1f611f6c81301d23d06f00cfcc82:

• File www/build.wiki — part of check-in [f715add938] at 2022-08-29 17:54:35 on branch trunk — Researched, tested, and documented the set of "docker create --cap-drop" options we can add to strip away unnecessary root privileges inside the container without harming normal operation. Belt-and-suspenders: if any bad actor ever got into the container with root privileges, this would help prevent them from affecting anything outside the container. Added that set to the "make container-run" target so they get applied by default in the easy case. (user: wyoung size: 39048)

A hex dump of this file is not available. Please download the raw binary file and generate a hex dump yourself.