| Age | Commit message (Expand) | Author |
|---|---|---|
| 2025-09-14 | test/sandbox: check extra writable paths | Ophestra |
| 2025-09-14 | test/sandbox: bind /var/tmp writable | Ophestra |
| 2025-09-14 | internal/app: mount /dev/shm early | Ophestra |
| 2025-08-27 | app/seal: leave $DISPLAY as is on host abstract | Ophestra |
| 2025-08-26 | container/initdev: mount tmpfs on shm for ro dev | Ophestra |
| 2025-08-26 | hst: use hsu userid for share path suffix | Ophestra |
| 2025-08-26 | hst/config: remove data field, rename dir to home | Ophestra |
| 2025-08-18 | container: optionally isolate host abstract UNIX domain sockets via landlock | Clayton Gilmer |
| 2025-08-18 | app: set up acl on X11 socket | Ophestra |
| 2025-08-03 | container/ops: mount dev readonly | Ophestra |
| 2025-08-01 | app: remount root readonly | Ophestra |
| 2025-08-01 | nix: remove nscd cover | Ophestra |
| 2025-08-01 | container/mount: pass tmpfs flags | Ophestra |
| 2025-07-26 | nix: update flake lock | Ophestra |
| 2025-07-09 | test/sandbox: add arm64 constants | Ophestra |
| 2025-07-09 | test/sandbox: verify seccomp on all test cases | Ophestra |
