Ophestra 022cc26b2e

container/capability: check CAP_TO_INDEX and CAP_TO_MASK ...

Signed-off-by: Ophestra <cat@gensokyo.uk>

2025-08-20 02:45:00 +09:00

..

seccomp

container: use more reliable nonexistence

2025-07-18 23:18:26 +09:00

vfs

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

absolute_test.go

container/path: remove unused path

2025-08-14 05:00:09 +09:00

absolute.go

container/absolute: wrap safe stdlib functions

2025-08-10 03:11:10 +09:00

autoetc_test.go

container/autoetc: do not bypass absolute check

2025-08-20 02:37:11 +09:00

autoetc.go

container/autoetc: do not bypass absolute check

2025-08-20 02:37:11 +09:00

autoroot_test.go

container/autoroot: check host path equivalence by value

2025-08-20 02:14:39 +09:00

autoroot.go

container/autoroot: check host path equivalence by value

2025-08-20 02:14:39 +09:00

capability_test.go

container/capability: check CAP_TO_INDEX and CAP_TO_MASK

2025-08-20 02:45:00 +09:00

capability.go

container: raise CAP_DAC_OVERRIDE

2025-08-08 00:43:19 +09:00

container_test.go

container: check output helper functions

2025-08-17 02:59:37 +09:00

container.go

container: optionally isolate host abstract UNIX domain sockets via landlock

2025-08-18 16:28:14 +09:00

executable_test.go

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

executable.go

container: move out of toplevel

2025-07-03 02:59:43 +09:00

init_test.go

container: use absolute for pathname

2025-08-11 04:56:42 +09:00

init.go

container/ops: move Op type to init file

2025-08-20 01:11:24 +09:00

initbind_test.go

container/initbind: check path equivalence by value

2025-08-20 02:22:04 +09:00

initbind.go

container/initbind: check path equivalence by value

2025-08-20 02:22:04 +09:00

initdev.go

container/init: split setup ops into individual files

2025-08-20 01:28:31 +09:00

initmkdir_test.go

container/initmkdir: check path equivalence by value

2025-08-20 02:32:22 +09:00

initmkdir.go

container/initmkdir: check path equivalence by value

2025-08-20 02:32:22 +09:00

initoverlay.go

container/init: split setup ops into individual files

2025-08-20 01:28:31 +09:00

initplace.go

container/init: split setup ops into individual files

2025-08-20 01:28:31 +09:00

initproc.go

container/init: split setup ops into individual files

2025-08-20 01:28:31 +09:00

initremount.go

container/init: split setup ops into individual files

2025-08-20 01:28:31 +09:00

initsymlink.go

container/init: split setup ops into individual files

2025-08-20 01:28:31 +09:00

inittmpfs.go

container/init: split setup ops into individual files

2025-08-20 01:28:31 +09:00

landlock_test.go

container: optionally isolate host abstract UNIX domain sockets via landlock

2025-08-18 16:28:14 +09:00

landlock.go

container: optionally isolate host abstract UNIX domain sockets via landlock

2025-08-18 16:28:14 +09:00

mount_test.go

container/autoroot: check host path equivalence by value

2025-08-20 02:14:39 +09:00

mount.go

container: export overlay escape

2025-08-14 23:44:11 +09:00

msg_test.go

container: check output helper functions

2025-08-17 02:59:37 +09:00

msg.go

container: move out of toplevel

2025-07-03 02:59:43 +09:00

output_test.go

container: check output helper functions

2025-08-17 02:59:37 +09:00

output.go

container: move out of toplevel

2025-07-03 02:59:43 +09:00

params_test.go

container/params: check setup/receive behaviour

2025-08-18 22:30:34 +09:00

params.go

container/params: check setup/receive behaviour

2025-08-18 22:30:34 +09:00

path_test.go

container/path: check create and mountinfo helpers

2025-08-18 21:30:28 +09:00

path.go

container/path: check create and mountinfo helpers

2025-08-18 21:30:28 +09:00

syscall_amd64.go

container: move syscall constants

2025-07-07 13:23:01 +09:00

syscall.go

container: ptrace protection via Yama LSM

2025-08-20 00:43:55 +09:00

sysctl.go

container/path: fhs path constants

2025-08-03 21:16:45 +09:00