Commit Graph

Select branches

Hide Pull Requests

develop

fpkg

fsu-bypass

master

staging

v0.0.1

v0.0.10

v0.0.11

v0.0.2

v0.0.3

v0.0.4

v0.0.5

v0.0.6

v0.0.7

v0.0.8

v0.0.9

v0.1.0

v0.2.0

v0.2.1

v0.2.10

v0.2.11

v0.2.12

v0.2.13

v0.2.14

v0.2.15

v0.2.16

v0.2.17

v0.2.18

v0.2.2

v0.2.3

v0.2.4

v0.2.5

v0.2.6

v0.2.7

v0.2.8

v0.2.9

v0.3.0

v0.3.1

v0.3.2

v0.3.3

Mono Color

• c47ce10061
  
  app: improve shim process management staging Ophestra 2025-04-04 10:57:27 +0900
• 12be7bc78e
  
  release: 0.3.3 master v0.3.3 develop Ophestra 2025-04-01 01:42:10 +0900
• 0ba8be659f
  
  sandbox: document less obvious parts of setup Ophestra 2025-04-01 01:21:04 +0900
• 022242a84a
  
  app: wayland socket in process share Ophestra 2025-04-01 00:53:04 +0900
• 8aeb06f53c
  
  app: share path setup on demand Ophestra 2025-03-31 23:14:00 +0900
• 4036da3b5c
  
  fst: optional configured shell path Ophestra 2025-03-31 19:31:37 +0900
• 986105958c
  
  fortify: update show output Ophestra 2025-03-31 04:54:10 +0900
• ecdd4d8202
  
  fortify: clean ps output Ophestra 2025-03-31 04:41:08 +0900
• bdee0c3921
  
  nix: update flake lock Ophestra 2025-03-30 23:15:18 +0900
• 48f634d046
  
  release: 0.3.2 v0.3.2 Ophestra 2025-03-30 23:05:57 +0900
• 2a46f5bb12
  
  sandbox/seccomp: update doc comment Ophestra 2025-03-30 23:00:20 +0900
• 7f2c0af5ad
  
  fst: set multiarch bit Ophestra 2025-03-30 22:55:00 +0900
• 297b444dfb
  
  test: separate app and sandbox Ophestra 2025-03-30 22:03:48 +0900
• 89a05909a4
  
  test: move test program to sandbox directory Ophestra 2025-03-30 21:09:16 +0900
• f772940768
  
  test/sandbox: treat ESRCH as temporary failure Ophestra 2025-03-30 03:50:59 +0900
• 8886c40974
  
  test/sandbox: separate check filter Ophestra 2025-03-29 22:34:51 +0900
• 8b62e08b44
  
  test: build test program in nixos config Ophestra 2025-03-29 19:33:17 +0900
• 72c59f9229
  
  nix: check share/applications in share package Ophestra 2025-03-29 19:28:20 +0900
• ff3cfbb437
  
  test/sandbox: check seccomp outcome Ophestra 2025-03-28 02:24:27 +0900
• c13eb70d7d
  
  sandbox/seccomp: add fortify default sample Ophestra 2025-03-28 02:02:02 +0900
• 389402f955
  
  test/sandbox/ptrace: generic filter block type Ophestra 2025-03-28 01:47:24 +0900
• 660a2898dc
  
  test/sandbox/ptrace: dump seccomp bpf program Ophestra 2025-03-28 01:09:26 +0900
• faf59e12c0
  
  test/sandbox: expose test tool Ophestra 2025-03-28 00:08:47 +0900
• d97a03c7c6
  
  test/sandbox: separate test tool source Ophestra 2025-03-27 23:43:13 +0900
• a102178019
  
  sys: update doc comment Ophestra 2025-03-27 22:43:17 +0900
• e400862a12
  
  state/multi: fix backend cache population race Ophestra 2025-03-27 22:37:08 +0900
• 184e9db2b2
  
  sandbox: support privileged container Ophestra 2025-03-27 19:40:19 +0900
• 605d018be2
  
  app/seal: check for '=' in envv Ophestra 2025-03-27 18:25:23 +0900
• 78aaae7ee0
  
  helper/args: copy args on wt creation Ophestra 2025-03-27 17:30:40 +0900
• 5c82f1ed3e
  
  helper/stub: output to stdout Ophestra 2025-03-27 17:25:10 +0900
• f8502c3ece
  
  test/sandbox: check environment Ophestra 2025-03-27 03:16:33 +0900
• 996b42634d
  
  test/sandbox: invoke check program directly Ophestra 2025-03-27 03:09:16 +0900
• 300571af47
  
  app: pass through $SHELL Ophestra 2025-03-27 01:22:40 +0900
• 32c90ef4e7
  
  nix: pass through exec arguments Ophestra 2025-03-27 01:08:53 +0900
• 2a4e2724a3
  
  release: 0.3.1 v0.3.1 fpkg Ophestra 2025-03-26 07:48:50 +0900
• d613257841
  
  sandbox/init: clear inheritable set Ophestra 2025-03-26 07:46:13 +0900
• 18644d90be
  
  sandbox: wrap capset syscall Ophestra 2025-03-26 07:44:07 +0900
• 52fcc48ac1
  
  sandbox/init: drop capabilities Ophestra 2025-03-26 06:28:32 +0900
• 8b69bcd215
  
  sandbox: cache kernel.cap_last_cap value Ophestra 2025-03-26 06:19:19 +0900
• 2dd49c437c
  
  app: create XDG_RUNTIME_DIR with perm 0700 Ophestra 2025-03-26 02:49:37 +0900
• 92852d8235
  
  release: 0.3.0 v0.3.0 Ophestra 2025-03-26 02:18:59 +0900
• 371dd5b938
  
  nix: create current-system symlink Ophestra 2025-03-26 02:06:11 +0900
• 4836d570ae
  
  test: raise long timeout to 15 seconds Ophestra 2025-03-26 01:59:05 +0900
• 985f9442e6
  
  sandbox: copy symlink with magic prefix Ophestra 2025-03-26 01:42:39 +0900
• 67eb28466d
  
  nix: create opengl-driver symlink Ophestra 2025-03-25 20:52:20 +0900
• c326c3f97d
  
  fst/sandbox: do not create /etc in advance Ophestra 2025-03-25 20:00:34 +0900
• 971c79bb80
  
  sandbox: remove hardcoded parent perm Ophestra 2025-03-25 19:49:51 +0900
• f86d868274
  
  sandbox: wrap error with its own text message Ophestra 2025-03-25 19:42:20 +0900
• 33940265a6
  
  sandbox: do not ensure symlink target Ophestra 2025-03-25 19:30:53 +0900
• b39f3aeb59
  
  helper: remove bubblewrap wrapper Ophestra 2025-03-25 05:35:02 +0900
• 61dbfeffe7
  
  sandbox/wl: move into sandbox Ophestra 2025-03-25 05:26:37 +0900
• 532feb4bfa
  
  app: merge shim into app package Ophestra 2025-03-25 05:21:47 +0900
• ec5e91b8c9
  
  system: optimise string formatting Ophestra 2025-03-25 04:42:30 +0900
• ee51320abf
  
  test: check revert type selection Ophestra 2025-03-25 04:37:58 +0900
• 5c4058d5ac
  
  app: run in native sandbox Ophestra 2025-03-25 01:52:49 +0900
• e732dca762
  
  wl: fix sync pipe keepalive Ophestra 2025-03-25 01:33:37 +0900
• a9adcd914b
  
  fortify/parse: omit try fd fallthrough message Ophestra 2025-03-25 01:21:11 +0900
• 3dd4ff29c8
  
  test/sandbox: check mount table length Ophestra 2025-03-24 16:36:53 +0900
• 61d86c5e10
  
  test/sandbox: fix stdout tty check Ophestra 2025-03-24 16:23:06 +0900
• d097eaa28f
  
  test/sandbox: unquote fail messages Ophestra 2025-03-24 16:03:53 +0900
• ad3576c164
  
  sandbox: resolve tty name Ophestra 2025-03-24 15:28:25 +0900
• b989a4601a
  
  test/sandbox: fail on mismatched mount entry Ophestra 2025-03-24 13:34:25 +0900
• a11237b158
  
  sandbox/vfs: add doc comments Ophestra 2025-03-24 13:21:55 +0900
• 40f00d570e
  
  sandbox: set mkdir perm Ophestra 2025-03-24 12:45:19 +0900
• 0eb1bc6301
  
  test/sandbox: verify outcome via mountinfo Ophestra 2025-03-24 01:39:31 +0900
• 1eb837eab8
  
  test/sandbox: warn about misuse in doc comment Ophestra 2025-03-23 23:28:28 +0900
• 0a4e633db2
  
  nix: filter test from source Ophestra 2025-03-23 22:20:19 +0900
• e8809125d4
  
  sandbox: verify outcome via mountinfo Ophestra 2025-03-23 22:17:36 +0900
• 806ce18c0a
  
  test/sandbox: check mapuid outcome Ophestra 2025-03-23 17:40:02 +0900
• b71d2bf534
  
  test/sandbox: check tty outcome Ophestra 2025-03-23 17:28:57 +0900
• 46059b1840
  
  test/sandbox: print mismatching file content Ophestra 2025-03-23 17:24:52 +0900
• d2c329bcea
  
  test: format path aid offsets Ophestra 2025-03-23 15:36:23 +0900
• 2d379b5a38
  
  test/sandbox: pass want file as argument Ophestra 2025-03-23 15:00:59 +0900
• 75e0c5d406
  
  test/sandbox: parse full test case Ophestra 2025-03-23 14:14:45 +0900
• 770b37ae16
  
  sandbox/vfs: match MS_NOSYMFOLLOW flag Ophestra 2025-03-23 13:57:30 +0900
• c638193268
  
  sandbox: apply vfs options to bind mounts Ophestra 2025-03-23 05:27:57 +0900
• 8c3a817881
  
  sandbox/vfs: unfold mount hierarchy Ophestra 2025-03-23 05:08:04 +0900
• e2fce321c1
  
  sandbox/vfs: expose mountinfo line scanning Ophestra 2025-03-22 18:22:29 +0900
• 241702ae3a
  
  go: 1.23 Ophestra 2025-03-22 16:41:15 +0900
• d21d9c5b1d
  
  sandbox/vfs: parse vfs options Ophestra 2025-03-21 17:12:10 +0900
• a70daf2250
  
  sandbox: resolve inverted flags in op Ophestra 2025-03-21 12:58:38 +0900
• 632b18addd
  
  test/sandbox: rename misleading bind destination Ophestra 2025-03-21 12:29:15 +0900
• a57a7a6a16
  
  test/sandbox: check type handling host_passthrough Ophestra 2025-03-21 12:21:08 +0900
• 5098b12e4a
  
  sandbox/vfs: count mountinfo entries Ophestra 2025-03-21 12:14:33 +0900
• 9ddf5794dd
  
  sandbox/vfs: implement proc_pid_mountinfo(5) parser Ophestra 2025-03-20 19:04:10 +0900
• b74a08dda9
  
  sandbox: prepare ops early Ophestra 2025-03-18 02:17:46 +0900
• 1b9408864f
  
  sandbox: pass cmd to cancel function Ophestra 2025-03-17 22:36:39 +0900
• cc89dbdf63
  
  sandbox: place files with content Ophestra 2025-03-17 22:13:22 +0900
• 228f3301f2
  
  sandbox: create directories Ophestra 2025-03-17 22:03:06 +0900
• 07181138e5
  
  sandbox/mount: pass absolute path Ophestra 2025-03-17 21:53:31 +0900
• 816b372f14
  
  sandbox: cancel process on serve error Ophestra 2025-03-17 21:49:45 +0900
• d7eddd54a2
  
  sandbox: rename params struct Ophestra 2025-03-17 21:45:08 +0900
• 7c063833e0
  
  internal/sys: wrap getuid/getgid Ophestra 2025-03-17 17:10:03 +0900
• af3619d440
  
  sandbox: create symlinks Ophestra 2025-03-17 16:37:56 +0900
• 528674cb6e
  
  sandbox/init: fail early on nil op Ophestra 2025-03-17 16:17:03 +0900
• 70c9757e26
  
  sandbox/mount: rename device flag Ophestra 2025-03-17 16:10:55 +0900
• c83a7e2efc
  
  sandbox: mount container /dev/mqueue Ophestra 2025-03-17 15:42:40 +0900
• 904208b87f
  
  sandbox: unwrap path string Ophestra 2025-03-17 15:33:20 +0900
• 007b52d81f
  
  sandbox/seccomp: check for both partial read outcomes Ophestra 2025-03-17 12:51:21 +0900
• 3385538142
  
  nix: clean up flake outputs Ophestra 2025-03-17 09:49:18 +0900