Clayton Gilmer 5db0714072 container: optionally isolate host abstract UNIX domain sockets via landlock

2025-08-18 16:28:14 +09:00

..

seccomp

container: use more reliable nonexistence

2025-07-18 23:18:26 +09:00

vfs

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

absolute_test.go

container/path: remove unused path

2025-08-14 05:00:09 +09:00

absolute.go

container/absolute: wrap safe stdlib functions

2025-08-10 03:11:10 +09:00

autoetc.go

container: enforce nonrepeatable autoetc and autoroot

2025-08-17 01:43:11 +09:00

autoroot.go

container: enforce nonrepeatable autoetc and autoroot

2025-08-17 01:43:11 +09:00

capability.go

container: raise CAP_DAC_OVERRIDE

2025-08-08 00:43:19 +09:00

container_test.go

container: check output helper functions

2025-08-17 02:59:37 +09:00

container.go

container: optionally isolate host abstract UNIX domain sockets via landlock

2025-08-18 16:28:14 +09:00

executable_test.go

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

executable.go

container: move out of toplevel

2025-07-03 02:59:43 +09:00

init_test.go

container: use absolute for pathname

2025-08-11 04:56:42 +09:00

init.go

container: move PR_SET_NO_NEW_PRIVS to parent

2025-08-18 11:46:02 +09:00

landlock_test.go

container: optionally isolate host abstract UNIX domain sockets via landlock

2025-08-18 16:28:14 +09:00

landlock.go

container: optionally isolate host abstract UNIX domain sockets via landlock

2025-08-18 16:28:14 +09:00

mount_test.go

container: export overlay escape

2025-08-14 23:44:11 +09:00

mount.go

container: export overlay escape

2025-08-14 23:44:11 +09:00

msg_test.go

container: check output helper functions

2025-08-17 02:59:37 +09:00

msg.go

container: move out of toplevel

2025-07-03 02:59:43 +09:00

ops.go

container: enforce nonrepeatable autoetc and autoroot

2025-08-17 01:43:11 +09:00

output_test.go

container: check output helper functions

2025-08-17 02:59:37 +09:00

output.go

container: move out of toplevel

2025-07-03 02:59:43 +09:00

params.go

container/params: remove confusingly named error

2025-08-09 17:37:46 +09:00

path_test.go

container: export overlay escape

2025-08-14 23:44:11 +09:00

path.go

container/path: remove unused path

2025-08-14 05:00:09 +09:00

syscall_amd64.go

container: move syscall constants

2025-07-07 13:23:01 +09:00

syscall.go

container: move PR_SET_NO_NEW_PRIVS to parent

2025-08-18 11:46:02 +09:00

sysctl.go

container/path: fhs path constants

2025-08-03 21:16:45 +09:00