| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-10-17 | ldd: run ldd with read-only filesystem and unshared net | Ophestra Umiker | |
| This is only called on trusted programs, however extra hardening is never a bad idea. Signed-off-by: Ophestra Umiker <cat@ophivana.moe> | |||
| 2024-10-09 | ldd: separate Parse from Exec and trim space | Ophestra Umiker | |
| Signed-off-by: Ophestra Umiker <cat@ophivana.moe> | |||
| 2024-10-09 | ldd: implement strict ldd output parser | Ophestra Umiker | |
| Fortify needs to internally resolve helper program sandbox config. They are considered trusted and runs under the privileged UID so ldd output is used to determine libraries they need inside the sandbox environment. Signed-off-by: Ophestra Umiker <cat@ophivana.moe> | |||
