aboutsummaryrefslogtreecommitdiffhomepage
AgeCommit message (Expand)Author
2025-04-12fst: check templateOphestra
2025-04-12app/instance: wrap internal implementationOphestra
2025-04-12app: rename app implementation packageOphestra
2025-04-11fst: mount passthrough /dev writableOphestra
2025-04-11test/sandbox: check device outcomeOphestra
2025-04-11fst: rename device fieldOphestra
2025-04-11sandbox: relative autoetc linksOphestra
2025-04-10sandbox: implement autoetc as setup opOphestra
2025-04-08sandbox/seccomp: rename flag type and constantsOphestra
2025-04-07fortify: print synthesised id in psOphestra
2025-04-07fortify: check fst id string lengthOphestra
2025-04-07app: install seccomp filter to shimOphestra
2025-04-07sandbox/seccomp: unexport println wrapperOphestra
2025-04-07app: improve shim process managementOphestra
2025-04-01release: 0.3.3Ophestra
2025-04-01sandbox: document less obvious parts of setupOphestra
2025-04-01app: wayland socket in process shareOphestra
2025-04-01app: share path setup on demandOphestra
2025-03-31fst: optional configured shell pathOphestra
2025-03-31fortify: update show outputOphestra
2025-03-31fortify: clean ps outputOphestra
2025-03-30nix: update flake lockOphestra
2025-03-30release: 0.3.2Ophestra
2025-03-30sandbox/seccomp: update doc commentOphestra
2025-03-30fst: set multiarch bitOphestra
2025-03-30test: separate app and sandboxOphestra
2025-03-30test: move test program to sandbox directoryOphestra
2025-03-30test/sandbox: treat ESRCH as temporary failureOphestra
2025-03-30test/sandbox: separate check filterOphestra
2025-03-29test: build test program in nixos configOphestra
2025-03-29nix: check share/applications in share packageOphestra
2025-03-28test/sandbox: check seccomp outcomeOphestra
2025-03-28sandbox/seccomp: add fortify default sampleOphestra
2025-03-28test/sandbox/ptrace: generic filter block typeOphestra
2025-03-28test/sandbox/ptrace: dump seccomp bpf programOphestra
2025-03-28test/sandbox: expose test toolOphestra
2025-03-27test/sandbox: separate test tool sourceOphestra
2025-03-27sys: update doc commentOphestra
2025-03-27state/multi: fix backend cache population raceOphestra
2025-03-27sandbox: support privileged containerOphestra
2025-03-27app/seal: check for '=' in envvOphestra
2025-03-27helper/args: copy args on wt creationOphestra
2025-03-27helper/stub: output to stdoutOphestra
2025-03-27test/sandbox: check environmentOphestra
2025-03-27test/sandbox: invoke check program directlyOphestra
2025-03-27app: pass through $SHELLOphestra
2025-03-27nix: pass through exec argumentsOphestra
2025-03-26release: 0.3.1Ophestra
2025-03-26sandbox/init: clear inheritable setOphestra
2025-03-26sandbox: wrap capset syscallOphestra