https://erico.dev/ Recent content on Érico's place Hugo -- gohugo.io en-us Tue, 29 Dec 2020 14:18:33 -0300 https://erico.dev/about/ Thu, 30 Jun 2022 17:25:50 -0300 https://erico.dev/about/ Hello! This is a personal blog, for projects and thoughts. We’ll see how it goes. Click here! Olá! Esse é um blog pessoal, para projetos e pensamentos. Vamos ver o que que sai. Clique aqui! For an initial introduction, take a look at my first blog post. Name: Érico Nogueira Rolim E-mail: classified IRC: “ericonr” on Libera and OFTC Mastodon: @ericonr@mastodon.online Occupation: Student at University of Campinas and intern at Sirius Synchrotron Light Source https://erico.dev/projects/ Thu, 30 Jun 2022 00:00:00 +0000 https://erico.dev/projects/ Individual projects avahi-dns: turn mDNS domains as reported by Avahi into DNS records. Might someday become a proper DNS server. dnsquery: DNS client written for learning purposes. ep: my shell prompt. Uses threads oportunistically. erm: a threaded rm(1) implementation. Use at your own peril. get-otp: shell + C project for a very simple terminal client for TOTP codes, without depending on a phone. purr-c: C project using BearSSL to learn some networking, basic crypto and SSL. https://erico.dev/posts/linux-capabilities/ Tue, 29 Dec 2020 14:18:33 -0300 https://erico.dev/posts/linux-capabilities/ Capabilities are a mechanism that allow privileges usually reserved to the super user to be granted or revoked in a more granular manner. Nowadays, their usage is reasonably wide spread across the Linux ecosystem, even though some warts remain in the interface, what with them being applied per thread, not per process (this is a recurring issue on Linux with credentials: user, group and supplementary group IDs are all per-thread attributes, instead of being applied process wide; this requires clever workarounds in libcs, as well as any language runtime that bypasses libc - see this Go commit that finally implemented the credential synchronization mechanism in their runtime).