aboutsummaryrefslogtreecommitdiffhomepage
AgeCommit message (Expand)Author
2025-01-23wl: separate inline COphestra
2025-01-23release: 0.2.11Ophestra
2025-01-23nix: apply shared home config to reserved aidOphestra
2025-01-23nix: expose syscall filter policyOphestra
2025-01-23nix: configure target users via nixosOphestra
2025-01-23nix: redirect sway output to journalOphestra
2025-01-22fst: add missing fields to templateOphestra
2025-01-22cmd/fpkg: expose syscall policy optionsOphestra
2025-01-22app/share: clean BaseError messageOphestra
2025-01-22dbus: enable syscall filterOphestra
2025-01-22ldd: enable syscall filterOphestra
2025-01-22fortify: set up seccomp verbose logging earlyOphestra
2025-01-22helper/bwrap: integrate seccomp into helper interfaceOphestra
2025-01-21proc: append to ExtraFiles slice pointerOphestra
2025-01-21state: store config in separate gob streamOphestra
2025-01-21fortify: print permissive defaults warning earlyOphestra
2025-01-20proc/priv/shim: resolve and load seccomp rulesOphestra
2025-01-20proc/priv/shim: seccomp bpf filter via libseccompOphestra
2025-01-20fst: include syscall filter configurationOphestra
2025-01-20nix: test show without --shortOphestra
2025-01-20proc/priv/shim: do not log bwrap argsOphestra
2025-01-20helper/bwrap: generic extra file interfaceOphestra
2025-01-19helper/bwrap: move sync to helper stateOphestra
2025-01-19proc/priv/shim: remove unnecessary stateOphestra
2025-01-18release: 0.2.10Ophestra
2025-01-18helper/bwrap: append --sync-fd before --Ophestra
2025-01-18proc/priv/init: early init checkOphestra
2025-01-18proc: remove duplicate compile-time fortify referenceOphestra
2025-01-18proc/priv/init: merge init into main programOphestra
2025-01-17proc/priv/shim: merge shim into main programOphestra
2025-01-17internal: do PR_SET_PDEATHSIG onceOphestra
2025-01-17nix: do not force static linking on nixOphestra
2025-01-16fortify: switch to static linkingOphestra
2025-01-15app: expose single run methodOphestra
2025-01-15release: 0.2.9Ophestra
2025-01-15helper/bwrap: separate sequential/static argsOphestra
2025-01-15fst: hide sockets exposed via FilesystemOphestra
2025-01-15fst: move sandbox struct to separate fileOphestra
2025-01-14helper/bwrap: register OverlayConfig with gobOphestra
2025-01-12dbus: implement dbus_parse_addressOphestra
2025-01-12dbus: rename makeTestCasesOphestra
2025-01-05helper/bwrap: implement overlayfs builderOphestra
2025-01-05helper/bwrap: move test out of bwrap packageOphestra
2025-01-05helper/bwrap: add json struct tag to filesystemOphestra
2025-01-04fst/config: allocate filesystem sliceOphestra
2025-01-01linux/std: handle fsu exit status 1Ophestra
2025-01-01fortify: show system info when instance is not specifiedOphestra
2024-12-31update reverse-DNS style identifiersOphestra
2024-12-30cmd/fpkg/install: deduplicate nix storeOphestra
2024-12-30cmd/fpkg: expose nixGL wrappersOphestra