EMILUA(3em)

✨ NAME ✨

okay so bestie, this is Emilua — a Lua execution engine 💅 (yes, the manual page is EMILUA(3em), we're in section 3em, iykyk).

🦋 SYNOPSIS 🦋

local libc_service = require "libc_service"

🎀 FUNCTIONS 🎀

🌸 new() → libc_service.master, libc_service.slave

This literally creates a brand-new communication channel to proxy calls to libc, no cap 🫶.

• The master end is the one you use to receive requests to ambient authority resources 👑
• The slave end must be sent to a process where ambient authority has been disabled (think FreeBSD’s Capsicum) and where libc functions have been overridden (think runtime loader or linker tricks[1]) so they use the proxy 💫

Important 🚨 libc_service is not a syscall firewall. It is not a security feature that blocks access to system resources. It’s merely a compatibility tool that translates classic POSIX interfaces so they can run in a system designed around the capability-based security model (e.g. FreeBSD’s Capsicum). Do not use it as your security vibe check, bestie 💀

This translation service is useful to make use of system libraries where it’s not feasible (nor desirable) to reimplement legacy code from scratch ✨

💜 NOTES 💜

• [1] — If your binary is linked against libemilua-libc-service, then these tricks are already in place and ready to use. Nothing more to be done on your part 🎀 periodt.

that’s the whole page, bestie 🌈 — brought to you by Emilua 0.12.1-nixpkgs1, dated 1980-01-01, and yes it’s still EMILUA(3em) 💅 mwah 🍓