13 Commits

Author	SHA1	Message	Date
Ophestra	241dc964a6	sandbox/seccomp: wire extra syscall ... These values are only useful for libseccomp. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-07-01 00:32:08 +09:00
Ophestra	8ef71e14d5	sandbox/seccomp: emit syscall constants ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-06-30 20:34:33 +09:00
Ophestra	9a8a047908	sandbox/seccomp: syscall name lookup table ... The script is from Go source of same name. The result is checked against libseccomp. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-06-26 03:49:07 +09:00
Ophestra	863bf69ad3	treewide: reapply clang-format ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-06-25 23:43:42 +09:00
Ophestra	87e008d56d	treewide: rename to hakurei ... Fortify makes little sense for a container tool. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-06-25 04:57:41 +09:00
Ophestra	ef80b19f2f	treewide: switch to clang-format ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-06-18 13:45:34 +09:00
Ophestra	584405f7cc	sandbox/seccomp: rename flag type and constants ... The names are ambiguous. Rename them to make more sense. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-04-08 01:59:45 +09:00
Ophestra	f885dede9b	sandbox/seccomp: unexport println wrapper ... This is an implementation detail that was exported for the bwrap argument builder. The removal of that package allows it to be unexported. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-04-07 04:07:20 +09:00
Ophestra	2a46f5bb12	sandbox/seccomp: update doc comment ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-30 23:00:20 +09:00
Ophestra	c13eb70d7d	sandbox/seccomp: add fortify default sample ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-28 02:02:02 +09:00
Ophestra	5c4058d5ac	app: run in native sandbox ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-25 01:52:49 +09:00
Ophestra	007b52d81f	sandbox/seccomp: check for both partial read outcomes ... This eliminates intermittent test failures. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 12:51:21 +09:00
Ophestra	24618ab9a1	sandbox: move out of internal ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 02:55:36 +09:00