Ophestra cat
cat pushed to bwrap at security/hakurei 2025-03-14 18:30:29 +09:00
7c60a4d8e8 helper: embed context on creation
cat pushed to bwrap at security/hakurei 2025-03-14 17:56:45 +09:00
4bb5d9780f ldd: run in native sandbox
cat pushed to bwrap at security/hakurei 2025-03-14 17:51:34 +09:00
507374caa6 ldd: run in native sandbox
cat pushed to bwrap at security/hakurei 2025-03-14 17:43:01 +09:00
f41fd94628 sandbox: write uid/gid map as init
cat pushed to bwrap at security/hakurei 2025-03-14 02:38:37 +09:00
94895bbacb sandbox: invert seccomp ruleset defaults
cat pushed to bwrap at security/hakurei 2025-03-14 02:18:53 +09:00
f332200ca4 sandbox: mount container /dev
cat pushed to bwrap at security/hakurei 2025-03-14 02:12:52 +09:00
2eff470091 sandbox/mount: pass custom tmpfs name
cat pushed to bwrap at security/hakurei 2025-03-14 02:11:43 +09:00
a092b042ab sandbox: pass params to setup ops
cat pushed to bwrap at security/hakurei 2025-03-14 02:10:53 +09:00
e94b09d337 sandbox/mount: fix source flag path
cat pushed to bwrap at security/hakurei 2025-03-14 00:21:34 +09:00
5d9e669d97 sandbox: separate tmpfs function from op
cat pushed to bwrap at security/hakurei 2025-03-14 00:16:47 +09:00
f1002157a5 sandbox: separate bind mount function from op
cat pushed to bwrap at security/hakurei 2025-03-13 21:57:59 +09:00
4133b555ba internal/app: rename init to init0
cat pushed to bwrap at security/hakurei 2025-03-13 21:38:06 +09:00
9b1a60b5c9 sandbox: native container tooling
cat pushed to bwrap at security/hakurei 2025-03-13 21:12:04 +09:00
9f43c2a263 sandbox: native container tooling
cat pushed to bwrap at security/hakurei 2025-03-13 20:58:01 +09:00
beb3918809 test: run go test under regular user
cat pushed to bwrap at security/hakurei 2025-03-13 16:40:24 +09:00
2871426df2 test: print output of failed test
cat pushed to bwrap at security/hakurei 2025-03-13 16:39:27 +09:00
cat pushed to bwrap at security/hakurei 2025-03-13 01:06:28 +09:00
8eef266d31 sandbox: implement native container tool
cat pushed to bwrap at security/hakurei 2025-03-13 00:59:20 +09:00
60bce2f94b sandbox: implement native container tool
cat pushed to bwrap at security/hakurei 2025-03-13 00:42:51 +09:00
e048f31baa internal: pull EINTR loop from stdlib