Ophestra c806f43881 sandbox: implement autoetc as setup op ...

This significantly reduces setup op count and the readdir call now happens in the context of the init process.

Signed-off-by: Ophestra <cat@gensokyo.uk>

2025-04-10 18:54:25 +09:00

..

seccomp

sandbox/seccomp: rename flag type and constants

2025-04-08 01:59:45 +09:00

vfs

sandbox/vfs: add doc comments

2025-03-24 13:21:55 +09:00

wl

sandbox/wl: move into sandbox

2025-03-25 05:26:37 +09:00

container_test.go

sandbox/seccomp: rename flag type and constants

2025-04-08 01:59:45 +09:00

container.go

sandbox/seccomp: rename flag type and constants

2025-04-08 01:59:45 +09:00

executable_test.go

sandbox: move out of internal

2025-03-17 02:55:36 +09:00

executable.go

sandbox: move out of internal

2025-03-17 02:55:36 +09:00

init.go

sandbox: document less obvious parts of setup

2025-04-01 01:21:04 +09:00

mount.go

sandbox: wrap error with its own text message

2025-03-25 19:42:20 +09:00

msg.go

sandbox: move out of internal

2025-03-17 02:55:36 +09:00

ops.go

sandbox: implement autoetc as setup op

2025-04-10 18:54:25 +09:00

output.go

sandbox: wrap error with its own text message

2025-03-25 19:42:20 +09:00

params.go

sandbox: move out of internal

2025-03-17 02:55:36 +09:00

path.go

sandbox: wrap error with its own text message

2025-03-25 19:42:20 +09:00

syscall.go

sandbox: support privileged container

2025-03-27 19:40:19 +09:00

sysctl.go

sandbox: cache kernel.cap_last_cap value

2025-03-26 06:19:19 +09:00