maemachinebroke/hakurei
1
0
Fork 0
forked from security/hakurei
Code Pull Requests Activity
Files
ba3227bf1572654cf1a3a828f7ee22ddd0224261
hakurei/test/sandbox
History
Ophestra 38245559dc container/ops: mount dev readonly 
There is usually no good reason to write to /dev. This however doesn't work in internal/app because FilesystemConfig supplied by ContainerConfig might add entries to /dev, so internal/app follows DevWritable with Remount instead.

Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-08-03 19:18:53 +09:00
..
case
container/ops: mount dev readonly
2025-08-03 19:18:53 +09:00
tool
test/sandbox: verify seccomp on all test cases
2025-07-09 04:21:35 +09:00
assert_test.go
test/sandbox: guard on testtool tag
2025-07-07 20:11:29 +09:00
assert.go
test/sandbox: verify seccomp on all test cases
2025-07-09 04:21:35 +09:00
configuration.nix
test/sandbox: check pd behaviour
2025-08-01 03:27:02 +09:00
default.nix
treewide: rename to hakurei
2025-06-25 04:57:41 +09:00
fs_test.go
test/sandbox: guard on testtool tag
2025-07-07 20:11:29 +09:00
fs.go
test/sandbox: guard on testtool tag
2025-07-07 20:11:29 +09:00
mount_test.go
test/sandbox: guard on testtool tag
2025-07-07 20:11:29 +09:00
mount.go
test/sandbox: guard on testtool tag
2025-07-07 20:11:29 +09:00
ptrace.go
test/sandbox: verify seccomp on all test cases
2025-07-09 04:21:35 +09:00
seccomp.go
test/sandbox: guard on testtool tag
2025-07-07 20:11:29 +09:00
test.py
test/sandbox: check pd behaviour
2025-08-01 03:27:02 +09:00