aboutsummaryrefslogtreecommitdiffhomepage
path: root/container
AgeCommit message (Expand)Author
2025-08-26container/initdev: mount tmpfs on shm for ro devOphestra
2025-08-26container/initbind: optional ensure host directoryOphestra
2025-08-25container/dispatcher: remove exit stub test logOphestra
2025-08-25container/autoroot: remove prefix fieldOphestra
2025-08-25container/initoverlay: internal bypass sysroot prefixOphestra
2025-08-24container/init: measure init behaviourOphestra
2025-08-23container/dispatcher: start goroutine in dispatcherOphestra
2025-08-23container/init: avoid multiple lastcap callsOphestra
2025-08-23container/dispatcher: instrument each goroutine individuallyOphestra
2025-08-23container/params: pass fd instead of fileOphestra
2025-08-22container/init: call lockOSThread through dispatcherOphestra
2025-08-22container: move integration test helpersOphestra
2025-08-22container/path: use syscall dispatcherOphestra
2025-08-22container/init: wrap syscall helper functionsOphestra
2025-08-21container/syscall: doc comments from manpagesOphestra
2025-08-21container/init: op interface valid methodOphestra
2025-08-20container/inittmpfs: check path equivalence by valueOphestra
2025-08-20container/initsymlink: check path equivalence by valueOphestra
2025-08-20container/initremount: check path equivalence by valueOphestra
2025-08-20container/initproc: check path equivalence by valueOphestra
2025-08-20container/initplace: check path equivalence by valueOphestra
2025-08-20container/initoverlay: check path equivalence by valueOphestra
2025-08-20container/init: use absolute compare methodOphestra
2025-08-20absolute: efficient equivalence check methodOphestra
2025-08-20container/initdev: check path equivalence by valueOphestra
2025-08-20container/capability: check CAP_TO_INDEX and CAP_TO_MASKOphestra
2025-08-20container/autoetc: do not bypass absolute checkOphestra
2025-08-20container/initmkdir: check path equivalence by valueOphestra
2025-08-20container/initbind: check path equivalence by valueOphestra
2025-08-20container/autoroot: check host path equivalence by valueOphestra
2025-08-20container/init: split setup ops into individual filesOphestra
2025-08-20container/ops: move Op type to init fileOphestra
2025-08-20container/autoroot: filter dentry with empty nameOphestra
2025-08-20container: ptrace protection via Yama LSMOphestra
2025-08-18container/params: check setup/receive behaviourOphestra
2025-08-18container/path: check create and mountinfo helpersOphestra
2025-08-18container: optionally isolate host abstract UNIX domain sockets via landlockClayton Gilmer
2025-08-18container: move PR_SET_NO_NEW_PRIVS to parentOphestra
2025-08-17container: start from locked threadOphestra
2025-08-17container: check output helper functionsOphestra
2025-08-17container: enforce nonrepeatable autoetc and autorootOphestra
2025-08-17container: allow additional state between opsOphestra
2025-08-14container: export overlay escapeOphestra
2025-08-14container/path: remove unused pathOphestra
2025-08-11container: use absolute for pathnameOphestra
2025-08-10container/absolute: wrap safe stdlib functionsOphestra
2025-08-09container: remove PATH lookup behaviourOphestra
2025-08-09container/absolute: early absolute pathname checkOphestra
2025-08-09container/params: remove confusingly named errorOphestra
2025-08-08container: document ambient capabilitiesOphestra