Ophestra 3d004e2916

container: ptrace protection via Yama LSM ...

This is only a nice to have feature as the init process has no additional privileges and the monitor process was never reachable anyway.

Closes #4.

Signed-off-by: Ophestra <cat@gensokyo.uk>

2025-08-20 00:30:07 +09:00

..

seccomp

container: use more reliable nonexistence

2025-07-18 23:18:26 +09:00

vfs

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

absolute_test.go

container/path: remove unused path

2025-08-14 05:00:09 +09:00

absolute.go

container/absolute: wrap safe stdlib functions

2025-08-10 03:11:10 +09:00

autoetc.go

container: enforce nonrepeatable autoetc and autoroot

2025-08-17 01:43:11 +09:00

autoroot.go

container: enforce nonrepeatable autoetc and autoroot

2025-08-17 01:43:11 +09:00

capability.go

container: raise CAP_DAC_OVERRIDE

2025-08-08 00:43:19 +09:00

container_test.go

container: check output helper functions

2025-08-17 02:59:37 +09:00

container.go

container: optionally isolate host abstract UNIX domain sockets via landlock

2025-08-18 16:28:14 +09:00

executable_test.go

treewide: migrate to hakurei.app

2025-07-03 03:30:39 +09:00

executable.go

container: move out of toplevel

2025-07-03 02:59:43 +09:00

init_test.go

container: use absolute for pathname

2025-08-11 04:56:42 +09:00

init.go

container: ptrace protection via Yama LSM

2025-08-20 00:30:07 +09:00

landlock_test.go

container: optionally isolate host abstract UNIX domain sockets via landlock

2025-08-18 16:28:14 +09:00

landlock.go

container: optionally isolate host abstract UNIX domain sockets via landlock

2025-08-18 16:28:14 +09:00

mount_test.go

container: export overlay escape

2025-08-14 23:44:11 +09:00

mount.go

container: export overlay escape

2025-08-14 23:44:11 +09:00

msg_test.go

container: check output helper functions

2025-08-17 02:59:37 +09:00

msg.go

container: move out of toplevel

2025-07-03 02:59:43 +09:00

ops.go

container: enforce nonrepeatable autoetc and autoroot

2025-08-17 01:43:11 +09:00

output_test.go

container: check output helper functions

2025-08-17 02:59:37 +09:00

output.go

container: move out of toplevel

2025-07-03 02:59:43 +09:00

params_test.go

container/params: check setup/receive behaviour

2025-08-18 22:30:34 +09:00

params.go

container/params: check setup/receive behaviour

2025-08-18 22:30:34 +09:00

path_test.go

container/path: check create and mountinfo helpers

2025-08-18 21:30:28 +09:00

path.go

container/path: check create and mountinfo helpers

2025-08-18 21:30:28 +09:00

syscall_amd64.go

container: move syscall constants

2025-07-07 13:23:01 +09:00

syscall.go

container: ptrace protection via Yama LSM

2025-08-20 00:30:07 +09:00

sysctl.go

container/path: fhs path constants

2025-08-03 21:16:45 +09:00