Jenkins CI has a clever feature where every password it injects will be redacted if printed to stdout; `enveil run` could do that with the wrapped process?
Of course that's only a defense against accidents. Nothing prevents encoding base64 or piping to disk.
I really liked using parallels, but when I got my apple silicon MacBook it was too much headache trying to get apps to compile on ARM. I meant to look into x86 VMs but it was experimental last I looked.
Of course that's only a defense against accidents. Nothing prevents encoding base64 or piping to disk.
reply