EMILUA(3em)

📦 version 0.12.1, in nixos 26.05, nixpkgs unstable

💖 NAME 💖

EMILUA(3em) — Emilua reference — Emilua - Lua execution engine 💅✨

✨ SYNOPSIS ✨

local system = require "system"
system.set_no_new_privs()

🌸 DESCRIPTION 🌸

Okay so bestie, this sets the no_new_privs attribute for the calling process (i.e. threads are synchronized even on Linux). That’s the whole move. 🫶

⚠️ Note: Only the master VM is allowed to use this function. Master VM only, no cap.

💀 BUGS 💀

There’s a libpsx bug that prevents thread synchronization to work: https://bugzilla.kernel.org/show_bug.cgi?id=218607. Yep, that’s the drama. 😭

💡 Tip: You may use system.seccomp_set_mode_filter() afterwards to synchronize the no_new_privs bit in all threads. iykyk 🧚

💌 Emilua 0.12.1-nixpkgs1 · 1980-01-01 · bye bestie, slay responsibly 🫶💖

📦 where this page comes from