hakurei/helper/bwrap/seccomp.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/helper/bwrap/seccomp.go?h=develop2025-03-24T20:35:02Zhelper: remove bubblewrap wrapper2025-03-24T20:35:02ZOphestracat@gensokyo.uk2025-03-24T20:35:02Zurn:sha1:b39f3aeb59095aef123920d891fecf890ce0b088
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: move out of internal2025-03-16T17:55:36ZOphestracat@gensokyo.uk2025-03-16T17:55:36Zurn:sha1:24618ab9a1524e8b8986a9bf67667288e642fcf1
Signed-off-by: Ophestra <cat@gensokyo.uk>
seccomp: install output atomically2025-03-16T16:10:27ZOphestracat@gensokyo.uk2025-03-16T16:09:12Zurn:sha1:ee108603572101ad3c285830e04ee248916b6c5d
Signed-off-by: Ophestra <cat@gensokyo.uk>
seccomp: move out of helper2025-03-14T13:42:40ZOphestracat@gensokyo.uk2025-03-14T13:42:40Zurn:sha1:2647a71be1f287e50011a65653b9e9c806627899
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/bwrap: PositionalArg implement fmt.Stringer2025-02-14T15:11:48ZOphestracat@gensokyo.uk2025-02-14T14:58:52Zurn:sha1:be7d944b39ed2e6a674c64c39c0f0f093d4d3097
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/bwrap: remove fmsg import2025-02-14T09:05:00ZOphestracat@gensokyo.uk2025-02-14T09:05:00Zurn:sha1:88040504b20fb2c0c7bfa71f2c01e88c138c71d8
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper: use generic extra files interface2025-02-13T14:34:15ZOphestracat@gensokyo.uk2025-02-13T14:15:34Zurn:sha1:fe7d208cf76fa6f24bb9d12ba29b5ed61d837ce3
This replaces the pipes object and integrates context into helper process lifecycle.
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/seccomp: do not call F_println if not verbose2025-01-25T04:19:38ZOphestracat@gensokyo.uk2025-01-25T04:19:38Zurn:sha1:7b96cd6ded2668b04c908737ff393b805d34cc5c
This (slightly) improves performance.
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper/seccomp: separate seccomp package2025-01-25T03:59:11ZOphestracat@gensokyo.uk2025-01-25T03:59:11Zurn:sha1:163f15e93f009d15ecc2f93932e26728aff9904b
Signed-off-by: Ophestra <cat@gensokyo.uk>
helper: block more unusual/privileged syscalls2025-01-25T03:35:47ZOphestracat@gensokyo.uk2025-01-25T03:35:47Zurn:sha1:37780456a75c08652bd191d0e9c2bb9077198dc4
These are toggled by F_EXT and exposed as SyscallPolicy.Compat in the Go interface.
Signed-off-by: Ophestra <cat@gensokyo.uk>