ifcurl/forgejo/server-config
Bruno Postle fef6c16946 ifcurl-preview.service: correct misleading execve comment
execve is actually permitted — it arrives via @default which is included in
@system-service.  The main service needs it for GitPython's git CLI calls.
Blocking execve only in render subprocesses would require per-process seccomp,
which is not worth the complexity for this threat model.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-25 08:30:41 +01:00
..
gitattributes gitconfig-ifcmerge: use --prioritise-local correctly per merge direction 2026-04-25 07:41:49 +01:00
gitconfig-ifcmerge gitconfig-ifcmerge: use --prioritise-local correctly per merge direction 2026-04-25 07:41:49 +01:00
ifcurl-preview.service ifcurl-preview.service: correct misleading execve comment 2026-04-25 08:30:41 +01:00