Ophestra d613257841 sandbox/init: clear inheritable set ...

Inheritable should not be able to affect anything regardless of its value, due to no_new_privs.

Signed-off-by: Ophestra <cat@gensokyo.uk>

2025-03-26 07:46:13 +09:00

..

seccomp

app: run in native sandbox

2025-03-25 01:52:49 +09:00

vfs

sandbox/vfs: add doc comments

2025-03-24 13:21:55 +09:00

wl

sandbox/wl: move into sandbox

2025-03-25 05:26:37 +09:00

container_test.go

sandbox: resolve tty name

2025-03-24 16:03:07 +09:00

container.go

sandbox/init: drop capabilities

2025-03-26 06:32:08 +09:00

executable_test.go

sandbox: move out of internal

2025-03-17 02:55:36 +09:00

executable.go

sandbox: move out of internal

2025-03-17 02:55:36 +09:00

init.go

sandbox/init: clear inheritable set

2025-03-26 07:46:13 +09:00

mount.go

sandbox: wrap error with its own text message

2025-03-25 19:42:20 +09:00

msg.go

sandbox: move out of internal

2025-03-17 02:55:36 +09:00

output.go

sandbox: wrap error with its own text message

2025-03-25 19:42:20 +09:00

params.go

sandbox: move out of internal

2025-03-17 02:55:36 +09:00

path.go

sandbox: wrap error with its own text message

2025-03-25 19:42:20 +09:00

sequential.go

sandbox: copy symlink with magic prefix

2025-03-26 01:42:39 +09:00

syscall.go

sandbox: wrap capset syscall

2025-03-26 07:44:07 +09:00

sysctl.go

sandbox: cache kernel.cap_last_cap value

2025-03-26 06:19:19 +09:00