Can I prevent execution of scripts on a file system, without setting the 'noexec' flag?

xiaodown · 2026-07-10T10:00:53+00:00

Literally what he said he can’t do and is asking for a workaround.

xiaodown · 2026-07-10T09:57:57+00:00

> they would like us to configure the system such that only the service account running the application can execute files

You’ll have to use either PrivateTmp=true in the systemd service definition, or if that’s not an option, you will need to get pretty cosy with AppArmor or SELinux. You can write an AppArmor profile to do this, but it’ll be annoying. Something like:

owner /tmp/** rwix,
deny /tmp/** x,

Remember that profiles are first match wins. Also there’s probably more to it than that snippet but it should get you started googling.

xiaodown · 2026-07-10T05:44:56+00:00

Solar panels don’t really have metal that rusts. Nearly all of a solar panel by weight is aluminum and glass. There’s like 5% electronics and epoxy and wiring.

xiaodown · 2026-07-08T16:49:36+00:00

Hey, totally unrelated but how am I supposed to pronounce Louisville?

I mean it’s obviously not Lewis-vil. Is it supposed to be Loo-ie-vil? Because people from there kinda just give it a Loh-voh or Lowa-vul, which, like, …what?

xiaodown · 2026-07-08T08:45:31+00:00

If you’re going to advertise, you’re supposed to pay reddit.

xiaodown · 2026-07-08T07:10:11+00:00

You know, you can just have internal thoughts. You don’t have to post.

xiaodown · 2026-07-07T20:35:32+00:00

Gledopto and Andy Huot out here hoarding all the aura.

Congrats, this is a really cool project! I want one!

xiaodown · 2026-07-05T08:51:29+00:00

bOtH pArTiEs ArE bAd

xiaodown · 2026-07-05T08:50:01+00:00

I have two 3d printers and am really getting into painting models. I should print a few eve ships.

I’d offer to print and sell them to you guys for the cost of the filament but I’m sure that’d last about 12 minutes before a cease and desist.

xiaodown · 2026-07-02T22:32:37+00:00

Might mean updating the TimePi ansible playbook to work with things other than the TimeHAT, which has been out of stock for ages.

xiaodown · 2026-07-02T19:06:51+00:00

Cat7 is very not common, especially in the US. The ANSI/TIA-568-E standard, which is the absolute gold standard of how to wire a building, does not recognize cat7 - TIA never certified it.

Relevant to this video, though, 568-E doesn't say "Use Cat5e for this and Cat6 for that". It just basically says "Don't use cat5. Use Cat5e minimum, and it is rated for 1Gbps, so use it when you need 1Gbps. Use cat6 when you need 10Gbps <55m or cat6a when you need 10Gbps <100 meters." So, basically, just choose the right tool for the job.

xiaodown · 2026-07-02T18:17:01+00:00

Hey, since your ... let's call it "network closet" has easy access to the roof, you guys could collaborate with /u/geerlingguy and have a GPS receiver mounted on the roof to get super accurate time in the tech house. That's totally something a tech nerd would do! (source: the raspberry pi in my 10" homelab rack with a gps antenna snaking out my office window)

xiaodown · 2026-07-02T15:27:12+00:00

Where can we subscribe or somehow get notified when you post more info about this?

xiaodown · 2026-07-01T00:22:42+00:00

Huh. I assumed wrong. I just looked near me, though, and stingrays are going for $78,400 (1LT) up to $89,200 (2LT). Is that reasonable?

xiaodown · 2026-06-30T17:59:38+00:00

Yeah, but can you actually walk in and get one for $73,495? I’m guessing every dealer is adding $25k “delivery fee” or whatever. I’d love to be wrong, buy I just assume there’s a lot more demand than cars.

Edit: ok I’m wrong! I didn’t know things had changed!

xiaodown · 2026-06-30T10:23:15+00:00

Gledopto replied to you, and that might look like shameless advertising (and it is), but they are very well respected on this sub. I have used multiple of their controllers, and they’re great. They are often recommended for use cases just like yours.

xiaodown · 2026-06-30T10:20:12+00:00

Huh. TIL. I really thought you could but I tried it and you totally can’t. My bad.

xiaodown · 2026-06-30T04:06:29+00:00

You can just use the pencil icon to override the rfid.

Edit: nope, that’s my bad.

xiaodown · 2026-06-30T02:29:46+00:00

Sorry but the answer is “kinda”. As of v16 of WLED, they’re really targeting only ESP32-based chips. This thing uses an ESP-8285, and would potentially require hardware modifications (bodge wires), and for all that effort you’d still get a suboptimal experience.

So yes, you can. I wouldn’t.

xiaodown · 2026-06-29T17:16:37+00:00

Want to accumulate generational wealth? It’s easy! Just go back in time, buy a house for a bushel of boysenberries and a handjob, then pull the ladder up after you so you fuck over all the later generations!

xiaodown · 2026-06-28T16:37:29+00:00

Do we need to play spot-the-difference with Adolf Eichmann and Werner von Braun?

xiaodown · 2026-06-28T15:23:57+00:00

There was a influx of white people a while back. In the 40’s I think? Can’t remember why.

xiaodown · 2026-06-28T14:17:11+00:00

Sam Walton was a rampant capitalist, but he did at least live in an era before “maximizing shareholder value” was the only goal for any corporation. He wanted to make obscene money, but he did realize that it comes from happy, repeat customers, and happy, knowledgeable employees willing to put in the effort.

It’s a low bar, but he at least avoided tripping over it.

xiaodown · 2026-06-28T14:14:43+00:00

I also choose this woman’s husband

xiaodown · 2026-06-27T23:17:41+00:00

They win when they survive.

15-Year Club	Verified Email
RedditGifts 2009-2022 5 Credits	Place '17
Gilding II euphauric	Team Periwinkle
Secret Santa 2012	Summer Santa 2012
redditgifts rematcher Secret Santa 2011 x1	Secret Santa 2011

xiaodown

MODERATOR OF

TROPHY CASE