Commit Graph

  • b71d2bf534 test/sandbox: check tty outcome cat 2025-03-23 17:28:57 +09:00
  • 46059b1840 test/sandbox: print mismatching file content cat 2025-03-23 17:24:52 +09:00
  • d2c329bcea test: format path aid offsets cat 2025-03-23 15:36:23 +09:00
  • 2d379b5a38 test/sandbox: pass want file as argument cat 2025-03-23 15:00:59 +09:00
  • 75e0c5d406 test/sandbox: parse full test case cat 2025-03-23 14:14:45 +09:00
  • 770b37ae16 sandbox/vfs: match MS_NOSYMFOLLOW flag cat 2025-03-23 13:57:30 +09:00
  • c638193268 sandbox: apply vfs options to bind mounts cat 2025-03-23 05:27:57 +09:00
  • 8c3a817881 sandbox/vfs: unfold mount hierarchy cat 2025-03-23 05:08:04 +09:00
  • e2fce321c1 sandbox/vfs: expose mountinfo line scanning cat 2025-03-22 18:22:29 +09:00
  • 241702ae3a go: 1.23 cat 2025-03-22 16:41:15 +09:00
  • d21d9c5b1d sandbox/vfs: parse vfs options cat 2025-03-21 17:12:10 +09:00
  • a70daf2250 sandbox: resolve inverted flags in op cat 2025-03-21 12:58:38 +09:00
  • 632b18addd test/sandbox: rename misleading bind destination cat 2025-03-21 12:29:15 +09:00
  • a57a7a6a16 test/sandbox: check type handling host_passthrough cat 2025-03-21 12:21:08 +09:00
  • 5098b12e4a sandbox/vfs: count mountinfo entries cat 2025-03-21 12:14:33 +09:00
  • 9ddf5794dd sandbox/vfs: implement proc_pid_mountinfo(5) parser cat 2025-03-20 19:04:10 +09:00
  • b74a08dda9 sandbox: prepare ops early cat 2025-03-18 02:17:46 +09:00
  • 1b9408864f sandbox: pass cmd to cancel function cat 2025-03-17 22:36:39 +09:00
  • cc89dbdf63 sandbox: place files with content cat 2025-03-17 22:13:22 +09:00
  • 228f3301f2 sandbox: create directories cat 2025-03-17 22:03:06 +09:00
  • 07181138e5 sandbox/mount: pass absolute path cat 2025-03-17 21:53:31 +09:00
  • 816b372f14 sandbox: cancel process on serve error cat 2025-03-17 21:49:45 +09:00
  • d7eddd54a2 sandbox: rename params struct cat 2025-03-17 21:45:08 +09:00
  • 7c063833e0 internal/sys: wrap getuid/getgid cat 2025-03-17 17:10:03 +09:00
  • af3619d440 sandbox: create symlinks cat 2025-03-17 16:37:56 +09:00
  • 528674cb6e sandbox/init: fail early on nil op cat 2025-03-17 16:17:03 +09:00
  • 70c9757e26 sandbox/mount: rename device flag cat 2025-03-17 16:10:55 +09:00
  • c83a7e2efc sandbox: mount container /dev/mqueue cat 2025-03-17 15:42:40 +09:00
  • 904208b87f sandbox: unwrap path string cat 2025-03-17 15:33:20 +09:00
  • 007b52d81f sandbox/seccomp: check for both partial read outcomes cat 2025-03-17 12:51:21 +09:00
  • 3385538142 nix: clean up flake outputs cat 2025-03-17 09:49:18 +09:00
  • 24618ab9a1 sandbox: move out of internal cat 2025-03-17 02:55:36 +09:00
  • 9ce4706a07 sandbox: move params setup functions cat 2025-03-17 02:48:32 +09:00
  • 9a1f8e129f sandbox: wrap fmsg interface cat 2025-03-17 02:31:46 +09:00
  • ee10860357 seccomp: install output atomically cat 2025-03-17 01:09:12 +09:00
  • 44277dc0f1 dbus: run in native sandbox cat 2025-03-17 00:13:14 +09:00
  • bc54db54d2 ldd: always copy stderr cat 2025-03-17 00:08:00 +09:00
  • bf07b7cd9e ldd: mount /proc in container cat 2025-03-17 00:01:03 +09:00
  • 5d3c8dcc92 test: raise timeout cat 2025-03-16 23:51:17 +09:00
  • 48feca800f sandbox: check command function pointer cat 2025-03-16 23:29:14 +09:00
  • 42de09e896 helper: implement native container backend cat 2025-03-16 02:57:46 +09:00
  • 1576fea8a3 helper: raise WaitDelay during tests cat 2025-03-16 02:34:06 +09:00
  • ae522ab364 test: run go tests with race detector cat 2025-03-16 02:07:42 +09:00
  • 273d97af85 ldd: lib paths resolve function cat 2025-03-16 01:20:09 +09:00
  • 891316d924 helper/stub: copy args to stderr cat 2025-03-16 00:39:42 +09:00
  • 9f5dad1998 sandbox: return on zero length ops cat 2025-03-16 00:32:36 +09:00
  • 6e7ddb2d2e helper: eliminate commandContext replacement cat 2025-03-15 23:57:44 +09:00
  • bac4e67867 sandbox/init: early params nil check cat 2025-03-15 04:03:10 +09:00
  • 4230281194 sandbox: return error on doubled start cat 2025-03-15 03:30:14 +09:00
  • e64e7608ca sandbox: expose cancel behaviour cat 2025-03-15 03:04:27 +09:00
  • 10a21ce3ef helper: expose extra files to direct cat 2025-03-15 02:21:59 +09:00
  • 0f1f0e4364 helper: combine helper ipc setup cat 2025-03-15 02:10:22 +09:00
  • f9bf20a3c7 helper: rearrange initialisation args cat 2025-03-15 01:02:18 +09:00
  • 73c1a83032 helper: move process wrapper to direct cat 2025-03-15 00:33:25 +09:00
  • f443d315ad helper: clean up interface cat 2025-03-15 00:27:44 +09:00
  • 9e18d1de77 helper/proc: pass extra files and start cat 2025-03-14 23:23:57 +09:00
  • 2647a71be1 seccomp: move out of helper cat 2025-03-14 22:42:40 +09:00
  • 7c60a4d8e8 helper: embed context on creation cat 2025-03-14 18:30:22 +09:00
  • 4bb5d9780f ldd: run in native sandbox cat 2025-03-14 17:51:29 +09:00
  • f41fd94628 sandbox: write uid/gid map as init cat 2025-03-14 17:41:08 +09:00
  • 94895bbacb sandbox: invert seccomp ruleset defaults cat 2025-03-14 02:38:32 +09:00
  • f332200ca4 sandbox: mount container /dev cat 2025-03-14 02:18:44 +09:00
  • 2eff470091 sandbox/mount: pass custom tmpfs name cat 2025-03-14 02:12:35 +09:00
  • a092b042ab sandbox: pass params to setup ops cat 2025-03-14 02:11:38 +09:00
  • e94b09d337 sandbox/mount: fix source flag path cat 2025-03-14 02:10:48 +09:00
  • 5d9e669d97 sandbox: separate tmpfs function from op cat 2025-03-14 00:21:20 +09:00
  • f1002157a5 sandbox: separate bind mount function from op cat 2025-03-14 00:16:41 +09:00
  • 4133b555ba internal/app: rename init to init0 cat 2025-03-13 21:57:54 +09:00
  • 9b1a60b5c9 sandbox: native container tooling cat 2025-03-13 20:59:03 +09:00
  • beb3918809 test: run go test under regular user cat 2025-03-13 20:56:32 +09:00
  • 2871426df2 test: print output of failed test cat 2025-03-13 16:40:15 +09:00
  • e048f31baa internal: pull EINTR loop from stdlib cat 2025-03-13 00:42:38 +09:00
  • 6af8b8859f sandbox: read overflow ids cat 2025-03-13 00:41:37 +09:00
  • f38ba7e923 test/sandbox: bypass fields cat 2025-03-13 00:00:58 +09:00
  • d22145a392 ldd: handle musl static behaviour cat 2025-03-12 23:29:43 +09:00
  • 29c3f8becb helper/seccomp: improve error handling cat 2025-03-12 15:52:48 +09:00
  • be16970e77 helper/seccomp: seccomp_load on negative fd cat 2025-03-12 15:18:52 +09:00
  • df266527f1 test/sandbox/mount: work around nondeterminism cat 2025-03-12 15:02:24 +09:00
  • c8ed7aae6e nix: update flake lock cat 2025-03-10 18:38:14 +09:00
  • 61e58aa14d helper/proc: expose setup file cat 2025-03-08 23:24:39 +09:00
  • 9e15898c8f internal/prctl: rename prctl wrappers cat 2025-03-07 22:56:35 +09:00
  • f7bd6a5a41 test/sandbox: check seccomp outcome cat 2025-03-04 13:30:16 +09:00
  • ea853e21d9 test/sandbox: check fs outcome cat 2025-03-03 01:02:09 +09:00
  • 0bd9b9e8fe test/sandbox: assert filesystem json cat 2025-03-02 23:23:04 +09:00
  • 39e32799b3 test/sandbox: compare filesystem hierarchy cat 2025-03-02 22:52:21 +09:00
  • 9953768de5 test: rename session message identifier cat 2025-03-02 22:47:33 +09:00
  • 0d3652b793 test/sandbox/assert: wrap printf cat 2025-03-02 18:37:46 +09:00
  • d8e9d71f87 test/sandbox: check mount outcome cat 2025-02-28 15:56:15 +09:00
  • 558974b996 test/sandbox: assert mntent json cat 2025-02-28 15:40:58 +09:00
  • 4de4049713 test/sandbox: wrap libc getmntent cat 2025-02-28 14:56:08 +09:00
  • 2d4cabe786 nix: increase nixfmt max width cat 2025-02-28 14:39:47 +09:00
  • 80f9b62d25 app: print comp values early cat 2025-02-26 20:10:32 +09:00
  • 673b648bd3 cmd/fpkg: call app in-process cat 2025-02-26 19:46:43 +09:00
  • 45ad788c6d cmd/fsu: allow switch from fpkg cat 2025-02-26 19:42:28 +09:00
  • 56539d8db5 fortify: move internal commands up cat 2025-02-26 18:02:11 +09:00
  • 840ceb615a app: handle RunState errors cat 2025-02-26 17:36:14 +09:00
  • 741d011543 fortify: configure seccomp logger early cat 2025-02-26 17:19:36 +09:00
  • d050b3de25 app: define errors in a separate file cat 2025-02-26 17:12:02 +09:00
  • 5de28800ad test: verify fsu ppid check cat 2025-02-26 16:51:57 +09:00
  • 8e50293ab7 test: remove sway process check cat 2025-02-26 13:52:44 +09:00