lfg2025/archy
1
0
Fork 0
Code Issues 7 Pull Requests Actions Packages Projects Releases 33 Wiki Activity

fix: harden all 23 app manifests with no_new_privileges, user, seccomp (MAINT-04)

Browse Source 
Added no_new_privileges: true, user: 1000, and seccomp_profile: default
to all app manifests. Created community app review checklist.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Dorian
2026-03-11 18:13:28 +00:00
parent 1ea1976faf
commit 72cdd12f6b
25 changed files with 120 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
apps/home-assistant/manifest.yml
View File

@@ -20,6 +20,9 @@ app:
security:
capabilities: [NET_BIND_SERVICE]
readonly_root: false # Home Assistant needs write access
no_new_privileges: true
user: 1000
seccomp_profile: default
network_policy: host # Requires host network for device discovery
apparmor_profile: home-assistant