René's URL Explorer Experiment


Title: GitHub - rootmos/h: Hardened script host programs

Open Graph Title: GitHub - rootmos/h: Hardened script host programs

X Title: GitHub - rootmos/h: Hardened script host programs

Description: Hardened script host programs. Contribute to rootmos/h development by creating an account on GitHub.

Open Graph Description: Hardened script host programs. Contribute to rootmos/h development by creating an account on GitHub.

X Description: Hardened script host programs. Contribute to rootmos/h development by creating an account on GitHub.

Opengraph URL: https://github.com/rootmos/h

X: @github

direct link

Domain: patch-diff.githubusercontent.com

route-pattern/:user_id/:repository
route-controllerfiles
route-actiondisambiguate
fetch-noncev2:0abbe83e-9337-af6c-d539-ac55cb62dff5
current-catalog-service-hashf3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-idA2E4:A15DC:9A79D4:C9314A:698D673F
html-safe-nonce876e43cdfce723dd758507d3b42d447ea609e575f15cad7082efcae729519478
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBMkU0OkExNURDOjlBNzlENDpDOTMxNEE6Njk4RDY3M0YiLCJ2aXNpdG9yX2lkIjoiODgyNjMyNDU1MTQ1MTEwOTE4MyIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmacfe21b94341258bd28d30721cac0feda071157224a4f72f713d09af23e91adbae
hovercard-subject-tagrepository:549735876
github-keyboard-shortcutsrepository,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location//
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/rootmos/h
twitter:imagehttps://opengraph.githubassets.com/1a0775fa8b3f817ef40ed59fe93a53d9eadb3778fb07350f3eceac7dea3c7f1a/rootmos/h
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/1a0775fa8b3f817ef40ed59fe93a53d9eadb3778fb07350f3eceac7dea3c7f1a/rootmos/h
og:image:altHardened script host programs. Contribute to rootmos/h development by creating an account on GitHub.
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
Nonec0818105fa276287e9369cfdefa0a0fa7953719791ceff9b94d69623c0a4fe8a
turbo-cache-controlno-preview
go-importgithub.com/rootmos/h git https://github.com/rootmos/h.git
octolytics-dimension-user_id7657134
octolytics-dimension-user_loginrootmos
octolytics-dimension-repository_id549735876
octolytics-dimension-repository_nworootmos/h
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id549735876
octolytics-dimension-repository_network_root_nworootmos/h
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release715890fa442134f528fb422ab338c0ad55c7a025
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://patch-diff.githubusercontent.com/rootmos/h#start-of-content
https://patch-diff.githubusercontent.com/
Sign in https://patch-diff.githubusercontent.com/login?return_to=https%3A%2F%2Fgithub.com%2Frootmos%2Fh
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub SparkBuild and deploy intelligent appshttps://github.com/features/spark
GitHub ModelsManage and compare promptshttps://github.com/features/models
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://patch-diff.githubusercontent.com/login?return_to=https%3A%2F%2Fgithub.com%2Frootmos%2Fh
Sign up https://patch-diff.githubusercontent.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=rootmos%2Fh
Reloadhttps://patch-diff.githubusercontent.com/rootmos/h
Reloadhttps://patch-diff.githubusercontent.com/rootmos/h
Reloadhttps://patch-diff.githubusercontent.com/rootmos/h
rootmos https://patch-diff.githubusercontent.com/rootmos
hhttps://patch-diff.githubusercontent.com/rootmos/h
Notifications https://patch-diff.githubusercontent.com/login?return_to=%2Frootmos%2Fh
Fork 0 https://patch-diff.githubusercontent.com/login?return_to=%2Frootmos%2Fh
Star 4 https://patch-diff.githubusercontent.com/login?return_to=%2Frootmos%2Fh
4 stars https://patch-diff.githubusercontent.com/rootmos/h/stargazers
0 forks https://patch-diff.githubusercontent.com/rootmos/h/forks
Branches https://patch-diff.githubusercontent.com/rootmos/h/branches
Tags https://patch-diff.githubusercontent.com/rootmos/h/tags
Activity https://patch-diff.githubusercontent.com/rootmos/h/activity
Star https://patch-diff.githubusercontent.com/login?return_to=%2Frootmos%2Fh
Notifications https://patch-diff.githubusercontent.com/login?return_to=%2Frootmos%2Fh
Code https://patch-diff.githubusercontent.com/rootmos/h
Issues 0 https://patch-diff.githubusercontent.com/rootmos/h/issues
Pull requests 0 https://patch-diff.githubusercontent.com/rootmos/h/pulls
Actions https://patch-diff.githubusercontent.com/rootmos/h/actions
Security 0 https://patch-diff.githubusercontent.com/rootmos/h/security
Insights https://patch-diff.githubusercontent.com/rootmos/h/pulse
Code https://patch-diff.githubusercontent.com/rootmos/h
Issues https://patch-diff.githubusercontent.com/rootmos/h/issues
Pull requests https://patch-diff.githubusercontent.com/rootmos/h/pulls
Actions https://patch-diff.githubusercontent.com/rootmos/h/actions
Security https://patch-diff.githubusercontent.com/rootmos/h/security
Insights https://patch-diff.githubusercontent.com/rootmos/h/pulse
Brancheshttps://patch-diff.githubusercontent.com/rootmos/h/branches
Tagshttps://patch-diff.githubusercontent.com/rootmos/h/tags
https://patch-diff.githubusercontent.com/rootmos/h/branches
https://patch-diff.githubusercontent.com/rootmos/h/tags
339 Commitshttps://patch-diff.githubusercontent.com/rootmos/h/commits/master/
https://patch-diff.githubusercontent.com/rootmos/h/commits/master/
.githubhttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/.github
.githubhttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/.github
buildhttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/build
buildhttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/build
dochttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/doc
dochttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/doc
hluahttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/hlua
hluahttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/hlua
hnodehttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/hnode
hnodehttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/hnode
hpythonhttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/hpython
hpythonhttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/hpython
hshhttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/hsh
hshhttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/hsh
toolshttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/tools
toolshttps://patch-diff.githubusercontent.com/rootmos/h/tree/master/tools
.gitattributeshttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/.gitattributes
.gitattributeshttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/.gitattributes
.gitignorehttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/.gitignore
.gitignorehttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/.gitignore
.versionhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/.version
.versionhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/.version
Makefilehttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/Makefile
Makefilehttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/Makefile
README.mdhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/README.md
README.mdhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/README.md
READMEhttps://patch-diff.githubusercontent.com/rootmos/h
https://patch-diff.githubusercontent.com/rootmos/h#hardened-script-host-programs
https://github.com/rootmos/h/actions/workflows/build-test.yaml
Alice: "Why not Docker?"Bob: "Because sudo docker".https://patch-diff.githubusercontent.com/rootmos/h#frequently-unasked-questions
landlockhttps://www.kernel.org/doc/html/latest/userspace-api/landlock.html
seccomphttps://www.kernel.org/doc/html/latest/userspace-api/seccomp_filter.html
luahttp://lua.org/
hluahttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/hlua
pythonhttps://python.org/
hpythonhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/hpython
nodehttps://nodejs.org/
hnodehttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/hnode
bashhttps://www.gnu.org/software/bash/
hshhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/hsh
https://patch-diff.githubusercontent.com/rootmos/h#disclaimer
https://patch-diff.githubusercontent.com/rootmos/h#raison-dêtre
gamehttps://love2d.org/
https://patch-diff.githubusercontent.com/rootmos/h#alices-game
designed to be difficult to readhttps://esolangs.org/wiki/Esoteric_programming_language#Obfuscation
fennelhttps://fennel-lang.org
Amulethttps://amulet.works/
any-effect-at-any-time languageshttps://www.youtube.com/watch?v=iSmkqocn0oQ
Haskellhttps://www.haskell.org
Learn You a Haskell for Great Good!http://www.learnyouahaskell.com
effhttps://www.eff-lang.org/
Ken Thompson's "Reflections on Trusting Trust"https://dl.acm.org/doi/10.1145/358198.358210
PDP-1https://en.wikipedia.org/wiki/PDP-1
OCamlhttps://ocaml.org/
bootstrapping binary complierhttps://github.com/ocaml/ocaml/blob/trunk/boot/ocamlc
"tusting trust"https://dl.acm.org/doi/10.1145/358198.358210
Coqhttps://en.wikipedia.org/wiki/Coq
no new privilegeshttps://www.kernel.org/doc/html/latest/userspace-api/no_new_privs.html
https://patch-diff.githubusercontent.com/rootmos/h#enter-no-new-privileges
prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)https://man.archlinux.org/man/prctl.2#PR_SET_NO_NEW_PRIVS
copy-pastable snippethttps://github.com/rootmos/libr/blob/master/modules/no_new_privs.c
exithttps://man.archlinux.org/man/exit.3a
libchttps://libc.org
atexithttps://man.archlinux.org/man/atexit.3
Erlanghttps://www.erlang.org/
Learn You Some Erlang for great good!https://learnyousomeerlang.com/
no_new_privshttps://github.com/rootmos/libr/blob/master/modules/no_new_privs.c
Principle of least privilegehttps://en.wikipedia.org/wiki/Principle_of_least_privilege
RealWorldhttps://hackage.haskell.org/package/base-4.13.0.0/docs/Control-Monad-ST-Safe.html#t:RealWorld
mayorhttps://www.youtube.com/watch?v=fmAWIDI4ZgY
seccomphttps://www.kernel.org/doc/html/latest/userspace-api/seccomp_filter.html
https://patch-diff.githubusercontent.com/rootmos/h#enter-seccomp
CVEhttps://en.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures
Arch Linux'shttps://lists.archlinux.org/mailman3/lists/arch-security.lists.archlinux.org/
Ubuntu'shttps://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
OpenBSD'shttps://www.openbsd.org/mail.html
stracehttps://man.archlinux.org/man/strace.1
https://patch-diff.githubusercontent.com/rootmos/h#enter-strace
hello worldhttps://rosettacode.org/wiki/Hello_world/Text
brkhttps://man.archlinux.org/man/brk.2
mmaphttps://man.archlinux.org/man/mmap.2
clonehttps://man.archlinux.org/man/clone.2
forkhttps://man.archlinux.org/man/fork.2
execvehttps://man.archlinux.org/man/execve.2
Berkeley Packet Filtershttps://www.kernel.org/doc/html/latest/bpf/index.html
https://patch-diff.githubusercontent.com/rootmos/h#enter-berkeley-packet-filters
cBPFhttps://www.kernel.org/doc/Documentation/networking/filter.txt
eBPFhttps://www.kernel.org/doc/html/latest/bpf/index.html
Project Eulerhttps://projecteuler.net
Advent of Codehttps://adventofcode.com
assemblerhttps://github.com/torvalds/linux/blob/master/tools/bpf/bpf_asm.c
preprocessorhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/tools/pp
bpfchttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/tools/bpfc
principle of least privilegehttps://en.wikipedia.org/wiki/Principle_of_least_privilege
massive amount of syscallshttps://git.musl-libc.org/cgit/musl/tree/arch/x86_64/bits/syscall.h.in?h=v1.2.3&id=7a43f6fea9081bdd53d8a11cef9e9fab0348c53d
fcntlhttps://man.archlinux.org/man/fcntl.2
ioctlhttps://man.archlinux.org/man/ioctl.2
prctlhttps://man.archlinux.org/man/prctl.2
we encountered abovehttps://patch-diff.githubusercontent.com/rootmos/h#enter-no-new-privileges
hlua's filterhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/hlua/filter.bpf
hnode's seccomp filterhttps://github.com/rootmos/h/blob/6ed41b19839291fe4ca404cb5c315223a0f72ec2/hnode/filter.bpf#L76
0, 1 and 3https://git.musl-libc.org/cgit/musl/tree/arch/x86_64/bits/syscall.h.in?h=v1.2.3&id=7a43f6fea9081bdd53d8a11cef9e9fab0348c53d#n1
how can you communicate the result of any computationhttps://youtu.be/iSmkqocn0oQ?t=195
seccomp's strict modehttps://man.archlinux.org/man/seccomp.2#SECCOMP_SET_MODE_STRICT
requirehttps://www.lua.org/manual/5.4/manual.html#pdf-require
griefinghttps://en.wikipedia.org/wiki/Griefing
unlinkhttps://man.archlinux.org/man/unlink.2
landlockhttps://www.kernel.org/doc/html/latest/userspace-api/landlock.html
https://patch-diff.githubusercontent.com/rootmos/h#enter-landlock
the highest syscall numberhttps://git.musl-libc.org/cgit/musl/tree/arch/x86_64/bits/syscall.h.in?h=v1.2.3&id=7a43f6fea9081bdd53d8a11cef9e9fab0348c53d#n355
landlockhttps://man.archlinux.org/man/landlock.7
O_TMPFILE flaghttps://man.archlinux.org/man/open.2#O_TMPFILE
the sample code provided with landlockhttps://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tree/samples/landlock/sandboxer.c?h=v6.0.7&id=3a2fa3c01fc7c2183eb3278bd912e5bcec20eb2a
verbatim what I usehttps://github.com/rootmos/libr/blob/master/modules/landlock.c
#define NAME_MAX 255https://git.musl-libc.org/cgit/musl/tree/include/limits.h?h=v1.2.3&id=7a43f6fea9081bdd53d8a11cef9e9fab0348c53d#n45
pphttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/tools/pp
59^255https://www.wolframalpha.com/input?i=59%5E255
chroothttps://man.archlinux.org/man/chroot.2.en
which implies we at least know their velocityhttps://en.wikipedia.org/wiki/Uncertainty_principle
hpythonhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/hpython
hpython's import testhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/hpython/test/import
pathshttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/tools/paths
dlinfohttps://man.archlinux.org/man/dlinfo.3
inspected and converted into a relevant landlock rules code snippethttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/tools/landlockc
hshhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/hsh
executes a bashhttps://man.archlinux.org/man/core/man-pages/fexecve.3.en
ldd /bin/bashhttps://man.archlinux.org/man/ldd.1
diversity of Linux distributionshttps://en.wikipedia.org/wiki/Linux_distribution#/media/File:Linux_Distribution_Timeline_21_10_2021.svg
awk-front-leds and sed-mid-legs twitchhttps://en.wikipedia.org/wiki/The_Metamorphosis
objdumphttps://man.archlinux.org/man/ldd.1#Security
poor_lddhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/tools/poor_ldd
dlinfohttps://man.archlinux.org/man/dlinfo.3
libhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/tools/lib.c
landlockchttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/tools/landlockc
drop capabilitieshttps://man.archlinux.org/man/capabilities.7
https://patch-diff.githubusercontent.com/rootmos/h#enter-drop-capabilities
code snippethttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/build/capabilities.c
CAP_NET_RAWhttps://man.archlinux.org/man/capabilities.7.en#CAP_NET_RAW
not setting another userhttps://docs.docker.com/engine/reference/builder/#user
inithttps://man.archlinux.org/man/init.1
rlimitshttps://man.archlinux.org/man/core/man-pages/setrlimit.2.en
https://patch-diff.githubusercontent.com/rootmos/h#enter-rlimits
Denial-of-service attackhttps://en.wikipedia.org/wiki/Denial-of-service_attack
pseudo-randomly generatedhttps://en.wikipedia.org/wiki/Xorshift
copy-on-writehttps://en.wikipedia.org/wiki/Copy-on-write
rlimitshttps://man.archlinux.org/man/core/man-pages/setrlimit.2.en
RLIMIT_AShttps://man.archlinux.org/man/core/man-pages/setrlimit.2.en#RLIMIT_AS
ulimithttps://man.archlinux.org/man/ulimit.1p
fork bombhttps://en.wikipedia.org/wiki/Fork_bomb
nodehttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/hnode
RLIMIT_NPROChttps://man.archlinux.org/man/core/man-pages/setrlimit.2.en#RLIMIT_NPROC
RLIMIT_FSIZEhttps://man.archlinux.org/man/core/man-pages/setrlimit.2.en#RLIMIT_FSIZE
code-snippet usedhttps://github.com/rootmos/libr/blob/master/modules/rlimit.c
hluahttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/hlua/main.c
hpythonhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/hpython/hpython.c
hnodehttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/hnode/main.cpp
principle of least privilegehttps://en.wikipedia.org/wiki/Principle_of_least_privilege
RLIMIT_NOFILEhttps://man.archlinux.org/man/core/man-pages/setrlimit.2.en#RLIMIT_NOFILE
https://patch-diff.githubusercontent.com/rootmos/h#conclusion
seccomphttps://patch-diff.githubusercontent.com/rootmos/h#enter-berkeley-packet-filters
landlockhttps://patch-diff.githubusercontent.com/rootmos/h#enter-landlock
strict resource usage limitshttps://patch-diff.githubusercontent.com/rootmos/h#enter-rlimits
surreal thing will she think of nexthttps://cs.stanford.edu/~knuth/sn.html
https://patch-diff.githubusercontent.com/rootmos/h#frequently-unasked-questions
principle of least privilegehttps://en.wikipedia.org/wiki/Principle_of_least_privilege
https://patch-diff.githubusercontent.com/rootmos/h#installation-and-build-instructions
https://patch-diff.githubusercontent.com/rootmos/h#building-from-sources
Linux kernel sourceshttps://github.com/torvalds/linux/tree/master/tools/bpf
bpfhttps://archlinux.org/packages/community/x86_64/bpf/
build scripthttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/tools/bpf/build
Build and testhttps://patch-diff.githubusercontent.com/rootmos/h/blob/master/.github/workflows/build-test.yaml
libcap2https://packages.ubuntu.com/noble/libcap2
lua5.4https://packages.ubuntu.com/noble/lua5.4
python3https://packages.ubuntu.com/noble/python3
libnode109https://packages.ubuntu.com/noble/libnode109
bashhttps://packages.ubuntu.com/noble/bash
makehttps://packages.ubuntu.com/noble/make
pkg-confighttps://packages.ubuntu.com/noble/pkg-config
gcchttps://packages.ubuntu.com/noble/gcc
libcap-devhttps://packages.ubuntu.com/noble/libcap-dev
wgethttps://packages.ubuntu.com/noble/wget
ca-certificateshttps://packages.ubuntu.com/noble/ca-certificates
bisonhttps://packages.ubuntu.com/noble/bison
flexhttps://packages.ubuntu.com/noble/flex
liblua5.4-devhttps://packages.ubuntu.com/noble/liblua5.4-dev
python3https://packages.ubuntu.com/noble/python3
libpython3-devhttps://packages.ubuntu.com/noble/libpython3-dev
libnode-devhttps://packages.ubuntu.com/noble/libnode-dev
libcap2https://packages.ubuntu.com/jammy/libcap2
lua5.4https://packages.ubuntu.com/jammy/lua5.4
python3https://packages.ubuntu.com/jammy/python3
libnode72https://packages.ubuntu.com/jammy/libnode72
bashhttps://packages.ubuntu.com/jammy/bash
makehttps://packages.ubuntu.com/jammy/make
pkg-confighttps://packages.ubuntu.com/jammy/pkg-config
gcchttps://packages.ubuntu.com/jammy/gcc
libcap-devhttps://packages.ubuntu.com/jammy/libcap-dev
wgethttps://packages.ubuntu.com/jammy/wget
ca-certificateshttps://packages.ubuntu.com/jammy/ca-certificates
bisonhttps://packages.ubuntu.com/jammy/bison
flexhttps://packages.ubuntu.com/jammy/flex
liblua5.4-devhttps://packages.ubuntu.com/jammy/liblua5.4-dev
python3https://packages.ubuntu.com/jammy/python3
libpython3-devhttps://packages.ubuntu.com/jammy/libpython3-dev
libnode-devhttps://packages.ubuntu.com/jammy/libnode-dev
python3-tomlhttps://packages.ubuntu.com/jammy/python3-toml
luahttps://archlinux.org/packages/extra/x86_64/lua/
pythonhttps://archlinux.org/packages/core/x86_64/python/
nodejshttps://archlinux.org/packages/extra/x86_64/nodejs/
bashhttps://archlinux.org/packages/core/x86_64/bash/
bpfhttps://archlinux.org/packages/extra/x86_64/bpf/
https://patch-diff.githubusercontent.com/rootmos/h#building-from-a-ubuntu-source-package
dpkg-buildpackagehttps://manpages.ubuntu.com/manpages/jammy/en/man1/dpkg-buildpackage.1.html
https://patch-diff.githubusercontent.com/rootmos/h#building-from-an-arch-linux-pkgbuild
PKGBUILDhttps://wiki.archlinux.org/title/PKGBUILD
makepkghttps://wiki.archlinux.org/title/PKGBUILD
https://patch-diff.githubusercontent.com/rootmos/h#todo
strace statisticshttps://man.archlinux.org/man/strace.1#Statistics
sandbox examplehttps://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/tree/samples/landlock/sandboxer.c#n233
readlinehttps://en.wikipedia.org/wiki/GNU_Readline
REPLhttps://en.wikipedia.org/wiki/Read%E2%80%93eval%E2%80%93print_loop
rlwraphttps://github.com/hanslub42/rlwrap
OpenBSD's pledge(2)https://man.openbsd.org/pledge.2
Readme https://patch-diff.githubusercontent.com/rootmos/h#readme-ov-file
Please reload this pagehttps://patch-diff.githubusercontent.com/rootmos/h
Activityhttps://patch-diff.githubusercontent.com/rootmos/h/activity
4 starshttps://patch-diff.githubusercontent.com/rootmos/h/stargazers
1 watchinghttps://patch-diff.githubusercontent.com/rootmos/h/watchers
0 forkshttps://patch-diff.githubusercontent.com/rootmos/h/forks
Report repository https://patch-diff.githubusercontent.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2Frootmos%2Fh&report=rootmos+%28user%29
Releases 24https://patch-diff.githubusercontent.com/rootmos/h/releases
v0.9.9 Latest Jul 25, 2025 https://patch-diff.githubusercontent.com/rootmos/h/releases/tag/v0.9.9
+ 23 releaseshttps://patch-diff.githubusercontent.com/rootmos/h/releases
Packages 0https://patch-diff.githubusercontent.com/users/rootmos/packages?repo_name=h
Please reload this pagehttps://patch-diff.githubusercontent.com/rootmos/h
C 64.4% https://patch-diff.githubusercontent.com/rootmos/h/search?l=c
Shell 16.1% https://patch-diff.githubusercontent.com/rootmos/h/search?l=shell
Python 8.4% https://patch-diff.githubusercontent.com/rootmos/h/search?l=python
C++ 7.4% https://patch-diff.githubusercontent.com/rootmos/h/search?l=c%2B%2B
Makefile 2.7% https://patch-diff.githubusercontent.com/rootmos/h/search?l=makefile
Dockerfile 0.6% https://patch-diff.githubusercontent.com/rootmos/h/search?l=dockerfile
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.