Josh Hawkins 2ef2323fbd harden root writes into unprivileged-owned paths ...

Restrict the sweep sentinel to a mount at or below /media/frigate so a
parent /media mount cannot bless a later-shadowed volume. Rebuild
/tmp/nginx root-owned each start so root's cp and tempio writes cannot
follow a symlink an unprivileged nginx planted in the previous run.

2026-08-27 09:28:32 -05:00

..

etc/s6-overlay/s6-rc.d

harden root writes into unprivileged-owned paths

2026-08-27 09:28:32 -05:00

labelmap

Adds support for YOLO-NAS in OpenVino (#11645)

2024-06-07 05:52:08 -06:00

usr/local

skip lost+found during the ownership sweep

2026-08-27 08:42:54 -05:00