Josh Hawkins 126cc0ba31 harden root writes into unprivileged-owned paths ...

Restrict the sweep sentinel to a mount at or below /media/frigate so a
parent /media mount cannot bless a later-shadowed volume. Rebuild
/tmp/nginx root-owned each start so root's cp and tempio writes cannot
follow a symlink an unprivileged nginx planted in the previous run.

2026-08-28 07:28:47 -05:00

..

data

Run nginx as the frigate user with writable state in /tmp/nginx

2026-08-28 07:28:47 -05:00

dependencies.d

Community Supported Boards Framework (#7114)

2023-07-23 16:45:29 -05:00

finish

Community Supported Boards Framework (#7114)

2023-07-23 16:45:29 -05:00

notification-fd

TLS support (#11678)

2024-06-01 10:29:46 -05:00

producer-for

Community Supported Boards Framework (#7114)

2023-07-23 16:45:29 -05:00

run

harden root writes into unprivileged-owned paths

2026-08-28 07:28:47 -05:00

timeout-kill

Community Supported Boards Framework (#7114)

2023-07-23 16:45:29 -05:00

type

Community Supported Boards Framework (#7114)

2023-07-23 16:45:29 -05:00