Skip to content

cxff bridge hardening - #484

Merged
alexp-sssup merged 2 commits into
mainfrom
cxff-bridge-hardening
Oct 16, 2026
Merged

alexp-sssup merged 2 commits into
mainfrom
cxff-bridge-hardening

Conversation

@yuri91

@yuri91 yuri91 commented Oct 16, 2026

Copy link
Copy Markdown
Member
  • cheerpx-for-flash: Document running the Native Bridge with the least privileges
  • cheerpx-for-flash: Add the version 43 changelog entry

yuri91 and others added 2 commits October 16, 2026 12:26
…privileges

From version 43 the bridge runs as any user. Show a minimally privileged
docker run command (unprivileged user, read-only file system with a
writable /tmp, no capabilities, no privilege escalation, read-only Flash
library) and explain each flag. The tutorial points to it for production.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@yuri91
yuri91 requested a review from alexp-sssup October 16, 2026 10:27
@yuri91
yuri91 requested a review from GabrielaReyna as a code owner October 16, 2026 10:27
@alexp-sssup
alexp-sssup merged commit 4a2ca1f into main Oct 16, 2026
4 checks passed
@alexp-sssup
alexp-sssup deleted the cxff-bridge-hardening branch October 16, 2026 11:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants