aboutsummaryrefslogtreecommitdiffhomepage
path: root/sandbox
AgeCommit message (Expand)Author
2025-07-02system: move system access packagesOphestra
2025-07-02hakurei: move container helpers toplevelOphestra
2025-07-02hakurei: move container toplevelOphestra
2025-07-02sandbox/wl: track generated filesOphestra
2025-07-02cmd/hakurei: move to cmdOphestra
2025-07-02sandbox: expose seccomp interfaceOphestra
2025-07-02sandbox/seccomp: import dot for syscallOphestra
2025-07-02sandbox/seccomp: append suffix to opsOphestra
2025-07-02sandbox/seccomp: prepare -> exportOphestra
2025-07-02sandbox/seccomp: native rule slice in helpersOphestra
2025-07-02sandbox/seccomp: native rule type aliasOphestra
2025-07-01sandbox/seccomp: resolve rules nativelyOphestra
2025-07-01sandbox/seccomp: extra constantsOphestra
2025-07-01sandbox/seccomp: implement syscall lookupOphestra
2025-07-01sandbox/seccomp: wire extra syscallOphestra
2025-06-30sandbox/seccomp: emit syscall constantsOphestra
2025-06-26treewide: switch to hakurei.appOphestra
2025-06-26sandbox/seccomp: syscall name lookup tableOphestra
2025-06-25treewide: reapply clang-formatOphestra
2025-06-25treewide: rename to hakureiOphestra
2025-06-18treewide: switch to clang-formatOphestra
2025-06-05nix: update flake lockOphestra
2025-04-11sandbox: relative autoetc linksOphestra
2025-04-10sandbox: implement autoetc as setup opOphestra
2025-04-08sandbox/seccomp: rename flag type and constantsOphestra
2025-04-07sandbox/seccomp: unexport println wrapperOphestra
2025-04-01sandbox: document less obvious parts of setupOphestra
2025-03-30sandbox/seccomp: update doc commentOphestra
2025-03-28sandbox/seccomp: add fortify default sampleOphestra
2025-03-27sandbox: support privileged containerOphestra
2025-03-26sandbox/init: clear inheritable setOphestra
2025-03-26sandbox: wrap capset syscallOphestra
2025-03-26sandbox/init: drop capabilitiesOphestra
2025-03-26sandbox: cache kernel.cap_last_cap valueOphestra
2025-03-26sandbox: copy symlink with magic prefixOphestra
2025-03-25sandbox: remove hardcoded parent permOphestra
2025-03-25sandbox: wrap error with its own text messageOphestra
2025-03-25sandbox: do not ensure symlink targetOphestra
2025-03-25sandbox/wl: move into sandboxOphestra
2025-03-25app: run in native sandboxOphestra
2025-03-24sandbox: resolve tty nameOphestra
2025-03-24sandbox/vfs: add doc commentsOphestra
2025-03-24sandbox: set mkdir permOphestra
2025-03-23sandbox: verify outcome via mountinfoOphestra
2025-03-23test/sandbox: parse full test caseOphestra
2025-03-23sandbox/vfs: match MS_NOSYMFOLLOW flagOphestra
2025-03-23sandbox: apply vfs options to bind mountsOphestra
2025-03-23sandbox/vfs: unfold mount hierarchyOphestra
2025-03-23sandbox/vfs: expose mountinfo line scanningOphestra
2025-03-21sandbox/vfs: parse vfs optionsOphestra