Show HN: Dirblock+envblock – tiny whitelist guards for dirs and env secrets
By pfrench42 · 2026-08-07 · 2 points · 1 comments
https://github.com/roku-oss/dirblock
After I missed getting hit by the LiteLLM attack by 30 minutes, I decided to see what I could do about it and wrote dirblock. It uses fanotify to block access to ~/.ssh, ~/.gpg, etc. with whitelists of trusted programs — everything else is denied. Shortly after, I wrot…
Open the full discussion on BetterNews