aboutsummaryrefslogtreecommitdiffhomepage
path: root/sandbox
AgeCommit message (Expand)Author
2025-06-05nix: update flake lockOphestra
2025-04-11sandbox: relative autoetc linksOphestra
2025-04-10sandbox: implement autoetc as setup opOphestra
2025-04-08sandbox/seccomp: rename flag type and constantsOphestra
2025-04-07sandbox/seccomp: unexport println wrapperOphestra
2025-04-01sandbox: document less obvious parts of setupOphestra
2025-03-30sandbox/seccomp: update doc commentOphestra
2025-03-28sandbox/seccomp: add fortify default sampleOphestra
2025-03-27sandbox: support privileged containerOphestra
2025-03-26sandbox/init: clear inheritable setOphestra
2025-03-26sandbox: wrap capset syscallOphestra
2025-03-26sandbox/init: drop capabilitiesOphestra
2025-03-26sandbox: cache kernel.cap_last_cap valueOphestra
2025-03-26sandbox: copy symlink with magic prefixOphestra
2025-03-25sandbox: remove hardcoded parent permOphestra
2025-03-25sandbox: wrap error with its own text messageOphestra
2025-03-25sandbox: do not ensure symlink targetOphestra
2025-03-25sandbox/wl: move into sandboxOphestra
2025-03-25app: run in native sandboxOphestra
2025-03-24sandbox: resolve tty nameOphestra
2025-03-24sandbox/vfs: add doc commentsOphestra
2025-03-24sandbox: set mkdir permOphestra
2025-03-23sandbox: verify outcome via mountinfoOphestra
2025-03-23test/sandbox: parse full test caseOphestra
2025-03-23sandbox/vfs: match MS_NOSYMFOLLOW flagOphestra
2025-03-23sandbox: apply vfs options to bind mountsOphestra
2025-03-23sandbox/vfs: unfold mount hierarchyOphestra
2025-03-23sandbox/vfs: expose mountinfo line scanningOphestra
2025-03-21sandbox/vfs: parse vfs optionsOphestra
2025-03-21sandbox: resolve inverted flags in opOphestra
2025-03-21sandbox/vfs: count mountinfo entriesOphestra
2025-03-21sandbox/vfs: implement proc_pid_mountinfo(5) parserOphestra
2025-03-18sandbox: prepare ops earlyOphestra
2025-03-17sandbox: pass cmd to cancel functionOphestra
2025-03-17sandbox: place files with contentOphestra
2025-03-17sandbox: create directoriesOphestra
2025-03-17sandbox/mount: pass absolute pathOphestra
2025-03-17sandbox: cancel process on serve errorOphestra
2025-03-17sandbox: rename params structOphestra
2025-03-17sandbox: create symlinksOphestra
2025-03-17sandbox/init: fail early on nil opOphestra
2025-03-17sandbox/mount: rename device flagOphestra
2025-03-17sandbox: mount container /dev/mqueueOphestra
2025-03-17sandbox: unwrap path stringOphestra
2025-03-17sandbox/seccomp: check for both partial read outcomesOphestra
2025-03-17sandbox: move out of internalOphestra