20 Commits

Author	SHA1	Message	Date
Ophestra	9a1f8e129f	sandbox: wrap fmsg interface ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 02:44:07 +09:00
Ophestra	ee10860357	seccomp: install output atomically ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-17 01:10:27 +09:00
Ophestra	48feca800f	sandbox: check command function pointer ... Setting default CommandContext on initialisation is somewhat of a footgun. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 23:29:14 +09:00
Ophestra	273d97af85	ldd: lib paths resolve function ... This is what always happens right after a ldd call, so implement it here. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 01:20:09 +09:00
Ophestra	9f5dad1998	sandbox: return on zero length ops ... This dodges potentially confusing behaviour where init fails due to Ops being clobbered during transfer. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-16 00:32:36 +09:00
Ophestra	bac4e67867	sandbox/init: early params nil check ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 04:03:10 +09:00
Ophestra	4230281194	sandbox: return error on doubled start ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 03:30:14 +09:00
Ophestra	e64e7608ca	sandbox: expose cancel behaviour ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-15 03:04:27 +09:00
Ophestra	2647a71be1	seccomp: move out of helper ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 22:42:40 +09:00
Ophestra	4bb5d9780f	ldd: run in native sandbox ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 17:55:55 +09:00
Ophestra	f41fd94628	sandbox: write uid/gid map as init ... This avoids PR_SET_DUMPABLE in the parent process. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 17:42:22 +09:00
Ophestra	94895bbacb	sandbox: invert seccomp ruleset defaults ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:38:32 +09:00
Ophestra	f332200ca4	sandbox: mount container /dev ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:18:44 +09:00
Ophestra	2eff470091	sandbox/mount: pass custom tmpfs name ... The tmpfs driver allows arbitrary fsname. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:12:35 +09:00
Ophestra	a092b042ab	sandbox: pass params to setup ops ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:11:38 +09:00
Ophestra	e94b09d337	sandbox/mount: fix source flag path ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 02:10:48 +09:00
Ophestra	5d9e669d97	sandbox: separate tmpfs function from op ... This is useful in the implementation of various other ops. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 00:21:20 +09:00
Ophestra	f1002157a5	sandbox: separate bind mount function from op ... This is useful in the implementation of various other ops. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-14 00:16:41 +09:00
Ophestra	9b1a60b5c9	sandbox: native container tooling ... This should eventually replace bwrap. Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 21:36:26 +09:00
Ophestra	6af8b8859f	sandbox: read overflow ids ... Signed-off-by: Ophestra <cat@gensokyo.uk>	2025-03-13 00:41:37 +09:00