Commit Graph

Select branches

Hide Pull Requests

develop

fpkg

fsu-bypass

master

staging

v0.0.1

Mono Color

• e8809125d4
  
  sandbox: verify outcome via mountinfo Ophestra 2025-03-23 22:17:36 +09:00
• 806ce18c0a
  
  test/sandbox: check mapuid outcome Ophestra 2025-03-23 17:40:02 +09:00
• b71d2bf534
  
  test/sandbox: check tty outcome Ophestra 2025-03-23 17:28:57 +09:00
• 46059b1840
  
  test/sandbox: print mismatching file content Ophestra 2025-03-23 17:24:52 +09:00
• d2c329bcea
  
  test: format path aid offsets Ophestra 2025-03-23 15:36:23 +09:00
• 2d379b5a38
  
  test/sandbox: pass want file as argument Ophestra 2025-03-23 15:00:59 +09:00
• 75e0c5d406
  
  test/sandbox: parse full test case Ophestra 2025-03-23 14:14:45 +09:00
• 770b37ae16
  
  sandbox/vfs: match MS_NOSYMFOLLOW flag Ophestra 2025-03-23 13:57:30 +09:00
• c638193268
  
  sandbox: apply vfs options to bind mounts Ophestra 2025-03-23 05:27:57 +09:00
• 8c3a817881
  
  sandbox/vfs: unfold mount hierarchy Ophestra 2025-03-23 05:08:04 +09:00
• e2fce321c1
  
  sandbox/vfs: expose mountinfo line scanning Ophestra 2025-03-22 18:22:29 +09:00
• 241702ae3a
  
  go: 1.23 Ophestra 2025-03-22 16:41:15 +09:00
• d21d9c5b1d
  
  sandbox/vfs: parse vfs options Ophestra 2025-03-21 17:12:10 +09:00
• a70daf2250
  
  sandbox: resolve inverted flags in op Ophestra 2025-03-21 12:58:38 +09:00
• 632b18addd
  
  test/sandbox: rename misleading bind destination Ophestra 2025-03-21 12:29:15 +09:00
• a57a7a6a16
  
  test/sandbox: check type handling host_passthrough Ophestra 2025-03-21 12:21:08 +09:00
• 5098b12e4a
  
  sandbox/vfs: count mountinfo entries Ophestra 2025-03-21 12:14:33 +09:00
• 9ddf5794dd
  
  sandbox/vfs: implement proc_pid_mountinfo(5) parser Ophestra 2025-03-20 19:04:10 +09:00
• b74a08dda9
  
  sandbox: prepare ops early Ophestra 2025-03-18 02:17:46 +09:00
• 1b9408864f
  
  sandbox: pass cmd to cancel function Ophestra 2025-03-17 22:36:39 +09:00
• cc89dbdf63
  
  sandbox: place files with content Ophestra 2025-03-17 22:13:22 +09:00
• 228f3301f2
  
  sandbox: create directories Ophestra 2025-03-17 22:03:06 +09:00
• 07181138e5
  
  sandbox/mount: pass absolute path Ophestra 2025-03-17 21:53:31 +09:00
• 816b372f14
  
  sandbox: cancel process on serve error Ophestra 2025-03-17 21:49:45 +09:00
• d7eddd54a2
  
  sandbox: rename params struct Ophestra 2025-03-17 21:45:08 +09:00
• 7c063833e0
  
  internal/sys: wrap getuid/getgid Ophestra 2025-03-17 17:10:03 +09:00
• af3619d440
  
  sandbox: create symlinks Ophestra 2025-03-17 16:37:56 +09:00
• 528674cb6e
  
  sandbox/init: fail early on nil op Ophestra 2025-03-17 16:17:03 +09:00
• 70c9757e26
  
  sandbox/mount: rename device flag Ophestra 2025-03-17 16:10:55 +09:00
• c83a7e2efc
  
  sandbox: mount container /dev/mqueue Ophestra 2025-03-17 15:42:40 +09:00
• 904208b87f
  
  sandbox: unwrap path string Ophestra 2025-03-17 15:33:20 +09:00
• 007b52d81f
  
  sandbox/seccomp: check for both partial read outcomes Ophestra 2025-03-17 12:51:21 +09:00
• 3385538142
  
  nix: clean up flake outputs Ophestra 2025-03-17 09:49:18 +09:00
• 24618ab9a1
  
  sandbox: move out of internal Ophestra 2025-03-17 02:55:36 +09:00
• 9ce4706a07
  
  sandbox: move params setup functions Ophestra 2025-03-17 02:48:32 +09:00
• 9a1f8e129f
  
  sandbox: wrap fmsg interface Ophestra 2025-03-17 02:31:46 +09:00
• ee10860357
  
  seccomp: install output atomically Ophestra 2025-03-17 01:09:12 +09:00
• 44277dc0f1
  
  dbus: run in native sandbox Ophestra 2025-03-17 00:13:14 +09:00
• bc54db54d2
  
  ldd: always copy stderr Ophestra 2025-03-17 00:08:00 +09:00
• bf07b7cd9e
  
  ldd: mount /proc in container Ophestra 2025-03-17 00:01:03 +09:00
• 5d3c8dcc92
  
  test: raise timeout Ophestra 2025-03-16 23:51:17 +09:00
• 48feca800f
  
  sandbox: check command function pointer Ophestra 2025-03-16 23:29:14 +09:00
• 42de09e896
  
  helper: implement native container backend Ophestra 2025-03-16 02:57:46 +09:00
• 1576fea8a3
  
  helper: raise WaitDelay during tests Ophestra 2025-03-16 02:34:06 +09:00
• ae522ab364
  
  test: run go tests with race detector Ophestra 2025-03-16 02:07:42 +09:00
• 273d97af85
  
  ldd: lib paths resolve function Ophestra 2025-03-16 01:20:09 +09:00
• 891316d924
  
  helper/stub: copy args to stderr Ophestra 2025-03-16 00:39:42 +09:00
• 9f5dad1998
  
  sandbox: return on zero length ops Ophestra 2025-03-16 00:32:36 +09:00
• 6e7ddb2d2e
  
  helper: eliminate commandContext replacement Ophestra 2025-03-15 23:57:44 +09:00
• bac4e67867
  
  sandbox/init: early params nil check Ophestra 2025-03-15 04:03:10 +09:00
• 4230281194
  
  sandbox: return error on doubled start Ophestra 2025-03-15 03:30:14 +09:00
• e64e7608ca
  
  sandbox: expose cancel behaviour Ophestra 2025-03-15 03:04:27 +09:00
• 10a21ce3ef
  
  helper: expose extra files to direct Ophestra 2025-03-15 02:21:59 +09:00
• 0f1f0e4364
  
  helper: combine helper ipc setup Ophestra 2025-03-15 02:10:22 +09:00
• f9bf20a3c7
  
  helper: rearrange initialisation args Ophestra 2025-03-15 01:02:18 +09:00
• 73c1a83032
  
  helper: move process wrapper to direct Ophestra 2025-03-15 00:33:25 +09:00
• f443d315ad
  
  helper: clean up interface Ophestra 2025-03-15 00:27:44 +09:00
• 9e18d1de77
  
  helper/proc: pass extra files and start Ophestra 2025-03-14 23:23:57 +09:00
• 2647a71be1
  
  seccomp: move out of helper Ophestra 2025-03-14 22:42:40 +09:00
• 7c60a4d8e8
  
  helper: embed context on creation Ophestra 2025-03-14 18:30:22 +09:00
• 4bb5d9780f
  
  ldd: run in native sandbox Ophestra 2025-03-14 17:51:29 +09:00
• f41fd94628
  
  sandbox: write uid/gid map as init Ophestra 2025-03-14 17:41:08 +09:00
• 94895bbacb
  
  sandbox: invert seccomp ruleset defaults Ophestra 2025-03-14 02:38:32 +09:00
• f332200ca4
  
  sandbox: mount container /dev Ophestra 2025-03-14 02:18:44 +09:00
• 2eff470091
  
  sandbox/mount: pass custom tmpfs name Ophestra 2025-03-14 02:12:35 +09:00
• a092b042ab
  
  sandbox: pass params to setup ops Ophestra 2025-03-14 02:11:38 +09:00
• e94b09d337
  
  sandbox/mount: fix source flag path Ophestra 2025-03-14 02:10:48 +09:00
• 5d9e669d97
  
  sandbox: separate tmpfs function from op Ophestra 2025-03-14 00:21:20 +09:00
• f1002157a5
  
  sandbox: separate bind mount function from op Ophestra 2025-03-14 00:16:41 +09:00
• 4133b555ba
  
  internal/app: rename init to init0 Ophestra 2025-03-13 21:57:54 +09:00
• 9b1a60b5c9
  
  sandbox: native container tooling Ophestra 2025-03-13 20:59:03 +09:00
• beb3918809
  
  test: run go test under regular user Ophestra 2025-03-13 20:56:32 +09:00
• 2871426df2
  
  test: print output of failed test Ophestra 2025-03-13 16:40:15 +09:00
• e048f31baa
  
  internal: pull EINTR loop from stdlib Ophestra 2025-03-13 00:42:38 +09:00
• 6af8b8859f
  
  sandbox: read overflow ids Ophestra 2025-03-13 00:41:37 +09:00
• f38ba7e923
  
  test/sandbox: bypass fields Ophestra 2025-03-13 00:00:58 +09:00
• d22145a392
  
  ldd: handle musl static behaviour Ophestra 2025-03-12 23:29:43 +09:00
• 29c3f8becb
  
  helper/seccomp: improve error handling Ophestra 2025-03-12 15:52:48 +09:00
• be16970e77
  
  helper/seccomp: seccomp_load on negative fd Ophestra 2025-03-12 15:18:52 +09:00
• df266527f1
  
  test/sandbox/mount: work around nondeterminism Ophestra 2025-03-12 15:02:24 +09:00
• c8ed7aae6e
  
  nix: update flake lock Ophestra 2025-03-10 18:38:14 +09:00
• 61e58aa14d
  
  helper/proc: expose setup file Ophestra 2025-03-08 23:24:39 +09:00
• 9e15898c8f
  
  internal/prctl: rename prctl wrappers Ophestra 2025-03-07 22:56:35 +09:00
• f7bd6a5a41
  
  test/sandbox: check seccomp outcome Ophestra 2025-03-04 13:30:16 +09:00
• ea853e21d9
  
  test/sandbox: check fs outcome Ophestra 2025-03-03 01:02:09 +09:00
• 0bd9b9e8fe
  
  test/sandbox: assert filesystem json Ophestra 2025-03-02 23:23:04 +09:00
• 39e32799b3
  
  test/sandbox: compare filesystem hierarchy Ophestra 2025-03-02 22:52:21 +09:00
• 9953768de5
  
  test: rename session message identifier Ophestra 2025-03-02 22:47:33 +09:00
• 0d3652b793
  
  test/sandbox/assert: wrap printf Ophestra 2025-03-02 18:37:46 +09:00
• d8e9d71f87
  
  test/sandbox: check mount outcome Ophestra 2025-02-28 15:56:15 +09:00
• 558974b996
  
  test/sandbox: assert mntent json Ophestra 2025-02-28 15:40:58 +09:00
• 4de4049713
  
  test/sandbox: wrap libc getmntent Ophestra 2025-02-28 14:56:08 +09:00
• 2d4cabe786
  
  nix: increase nixfmt max width Ophestra 2025-02-28 14:39:47 +09:00
• 80f9b62d25
  
  app: print comp values early Ophestra 2025-02-26 20:10:32 +09:00
• 673b648bd3
  
  cmd/fpkg: call app in-process Ophestra 2025-02-26 19:46:43 +09:00
• 45ad788c6d
  
  cmd/fsu: allow switch from fpkg Ophestra 2025-02-26 19:42:28 +09:00
• 56539d8db5
  
  fortify: move internal commands up Ophestra 2025-02-26 18:02:11 +09:00
• 840ceb615a
  
  app: handle RunState errors Ophestra 2025-02-26 17:36:14 +09:00
• 741d011543
  
  fortify: configure seccomp logger early Ophestra 2025-02-26 17:19:36 +09:00
• d050b3de25
  
  app: define errors in a separate file Ophestra 2025-02-26 17:12:02 +09:00