hakurei/sandbox/seccomp/seccomp-build.c, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/sandbox/seccomp/seccomp-build.c?h=develop2025-07-01T13:11:32Zsandbox/seccomp: resolve rules natively2025-07-01T13:11:32ZOphestracat@gensokyo.uk2025-07-01T11:23:33Zurn:sha1:1a8840bebc673672235b6e10b1b9386f24751757
This enables loading syscall filter policies from external cross-platform config files.
This also removes a significant amount of C code.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: reapply clang-format2025-06-25T14:43:42ZOphestracat@gensokyo.uk2025-06-25T14:43:42Zurn:sha1:863bf69ad32e44d06c654c8cfae875e37b8e5e5a
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: rename to hakurei2025-06-24T19:57:41ZOphestracat@gensokyo.uk2025-06-24T18:59:52Zurn:sha1:87e008d56de974947ebb99c2cc40b25d3c2cf43e
Fortify makes little sense for a container tool.
Signed-off-by: Ophestra <cat@gensokyo.uk>
treewide: switch to clang-format2025-06-18T04:45:34ZOphestracat@gensokyo.uk2025-06-18T04:43:48Zurn:sha1:ef80b19f2fbd6953340ff463b865931f32d14fb7
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox/seccomp: rename flag type and constants2025-04-07T16:59:45ZOphestracat@gensokyo.uk2025-04-07T16:59:45Zurn:sha1:584405f7ccd4c8c0e63762e113f4650f2abd469e
The names are ambiguous. Rename them to make more sense.
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox/seccomp: unexport println wrapper2025-04-06T19:07:20ZOphestracat@gensokyo.uk2025-04-06T19:07:20Zurn:sha1:f885dede9b10c06004be0eac19d80b7bc718100a
This is an implementation detail that was exported for the bwrap argument builder. The removal of that package allows it to be unexported.
Signed-off-by: Ophestra <cat@gensokyo.uk>
sandbox: move out of internal2025-03-16T17:55:36ZOphestracat@gensokyo.uk2025-03-16T17:55:36Zurn:sha1:24618ab9a1524e8b8986a9bf67667288e642fcf1
Signed-off-by: Ophestra <cat@gensokyo.uk>