Commit Graph

Select branches

Hide Pull Requests

0.6.x

auto

create-socket

disable-userns

drop-cap-bounding-set-2

export/flatpak/0.6.1

export/flatpak/0.6.2

export/flatpak/0.6.3

homu-tmp

main

privilege-separation

reuse-namespaces

wip/WSL

wip/smcv/for-flatpak-meson-build

#1

#101

#101

#103

#103

#108

#108

#109

#109

#110

#110

#111

#111

#113

#113

#114

#114

#115

#116

#116

#117

#117

#118

#118

#119

#119

#12

#120

#120

#121

#121

#122

#122

#123

#123

#124

#124

#127

#127

#128

#128

#129

#129

#133

#137

#137

#143

#143

#144

#144

#145

#145

#146

#146

#149

#149

#15

#150

#152

#152

#153

#153

#154

#154

#156

#156

#158

#158

#159

#159

#16

#160

#160

#161

#161

#163

#163

#165

#165

#166

#166

#167

#167

#168

#168

#169

#169

#17

#170

#170

#172

#172

#175

#175

#176

#176

#177

#177

#179

#179

#18

#183

#183

#187

#187

#188

#188

#189

#189

#19

#190

#190

#192

#192

#196

#199

#199

#20

#202

#202

#203

#203

#205

#205

#206

#206

#207

#207

#208

#208

#209

#209

#21

#211

#211

#212

#212

#215

#215

#218

#218

#219

#219

#22

#220

#220

#221

#221

#222

#222

#223

#227

#227

#228

#228

#229

#229

#23

#23

#230

#230

#231

#231

#232

#232

#234

#234

#235

#235

#236

#236

#237

#237

#238

#238

#24

#24

#240

#240

#242

#242

#243

#243

#244

#244

#245

#245

#246

#246

#25

#25

#256

#256

#258

#258

#26

#26

#260

#260

#261

#261

#262

#262

#265

#267

#267

#268

#27

#27

#271

#271

#277

#277

#278

#278

#28

#28

#280

#280

#283

#283

#285

#285

#286

#288

#288

#29

#29

#290

#290

#292

#292

#293

#294

#294

#295

#30

#30

#302

#303

#305

#31

#31

#316

#318

#32

#32

#323

#325

#327

#33

#33

#333

#333

#334

#338

#34

#34

#341

#341

#342

#344

#345

#347

#35

#35

#351

#354

#355

#356

#357

#37

#37

#370

#374

#377

#379

#38

#38

#383

#385

#385

#386

#389

#391

#391

#394

#394

#399

#40

#40

#400

#401

#402

#403

#404

#405

#406

#408

#409

#41

#41

#410

#411

#417

#418

#419

#42

#42

#421

#425

#425

#426

#426

#428

#429

#43

#43

#432

#433

#434

#436

#437

#438

#439

#44

#44

#440

#441

#443

#444

#445

#446

#447

#45

#45

#452

#456

#457

#459

#46

#46

#466

#47

#47

#471

#472

#474

#475

#476

#477

#48

#48

#481

#482

#483

#484

#486

#487

#488

#489

#49

#49

#491

#492

#493

#494

#495

#496

#50

#50

#501

#502

#506

#509

#51

#51

#510

#519

#519

#52

#52

#522

#522

#527

#53

#53

#539

#54

#54

#545

#547

#548

#55

#55

#550

#554

#556

#557

#557

#558

#559

#56

#56

#560

#562

#564

#566

#567

#57

#57

#571

#572

#572

#575

#576

#576

#577

#58

#58

#580

#586

#586

#588

#59

#59

#595

#595

#596

#597

#598

#599

#60

#60

#600

#602

#603

#604

#605

#605

#610

#615

#616

#616

#618

#619

#62

#62

#621

#622

#623

#624

#625

#627

#628

#629

#629

#63

#63

#630

#630

#636

#641

#646

#647

#65

#65

#652

#655

#655

#658

#659

#66

#66

#660

#661

#662

#663

#664

#665

#665

#666

#666

#667

#667

#67

#67

#676

#676

#679

#68

#68

#683

#694

#699

#699

#7

#70

#70

#704

#704

#706

#706

#709

#71

#71

#711

#72

#72

#724

#724

#728

#729

#73

#73

#75

#75

#77

#77

#78

#78

#80

#80

#84

#84

#85

#85

#86

#86

#89

#89

#90

#92

#94

#94

#95

#95

#96

#96

#97

#97

#98

#98

#99

#99

0.1.2

v0.1.0

v0.1.1

v0.1.3

v0.1.4

v0.1.5

v0.1.6

v0.1.7

v0.1.8

v0.10.0

v0.11.0

v0.2.0

v0.2.1

v0.3.0

v0.3.1

v0.3.2

v0.3.3

v0.4.0

v0.4.1

v0.5.0

v0.6.0

v0.6.1

v0.6.2

v0.6.3

v0.7.0

v0.8.0

v0.9.0

Mono Color

• 6d6cd0958c Don't print double errors in case privileged helper dies Alexander Larsson 2016-11-07 13:09:27 +01:00
• c8a8a7cd25 .redhat-ci.yml: New file Colin Walters 2016-10-25 14:12:33 -04:00
• 0bf9fb66c7 Release 0.1.3 v0.1.3 Colin Walters 2016-10-14 12:34:48 -04:00
• 7d035f1bbc Only set DUMPABLE when we need it (i.e. in user namespace child) Alexander Larsson 2016-10-13 17:35:17 +02:00
• f37abd142f Make notes on sandstorm.io somewhat more accurate Kenton Varda 2016-08-07 13:04:08 -07:00
• 133dcb7cba Don't allow setting hostname if not unsharing UTS namespace Alexander Larsson 2016-10-13 14:14:52 +02:00
• 98b51e4de4 Move commandline args to top of the file Alexander Larsson 2016-10-13 14:03:02 +02:00
• 169db04131 Fix capability list in spec file. Bill Nottingham 2016-09-24 00:43:06 -04:00
• 089327ddcf Release 0.1.2 0.1.2 Alexander Larsson 2016-09-09 09:05:49 +02:00
• 6355ffbd9c Remove the temp file created by --[ro-]-bind-data Alexander Larsson 2016-09-07 11:08:57 +02:00
• da38d86508 Add --ro-bind-data, which is the same as --bind-data but readonly Alexander Larsson 2016-09-07 10:55:57 +02:00
• 7d4e9762db Update bash completion Chad Versace 2016-09-02 06:43:21 -07:00
• d5fdb96ee0 manpage: Document option --unshare-user-try Chad Versace 2016-09-02 05:47:46 -07:00
• 500e86860a Fix --unshare-user in manpage Chad Versace 2016-09-02 05:43:52 -07:00
• 75f86d30ef Add --hostname HOSTNAME. Yawning Angel 2016-09-01 04:31:58 +00:00
• 3ebe54af1b Merge pull request #92 from giuseppe/bwrap-oci-hooks Alexander Larsson 2016-08-26 14:56:35 +02:00
• 5dc51fd36f bubblewrap: Fix typo Giuseppe Scrivano 2016-08-26 13:05:09 +02:00
• beb8aa1a74 Implement info-fd Giuseppe Scrivano 2016-08-24 21:09:29 +02:00
• f206c6d072 Implement block-fd Giuseppe Scrivano 2016-08-24 15:11:02 +02:00
• 48ce15e420 Merge pull request #90 from giuseppe/remount-ro Alexander Larsson 2016-08-26 14:33:41 +02:00
• e4188b1d24 Add --remount-ro DEST Giuseppe Scrivano 2016-08-12 12:15:28 +02:00
• 95a2ded375 Update xdg-app references Matthias Clasen 2016-07-22 17:00:33 -04:00
• f64a1917d1 Release 0.1.1 v0.1.1 Colin Walters 2016-07-05 11:37:05 -04:00
• 625209e494 README.md: minor typo fixes Closes: #80 Approved by: cgwalters Tim Janik 2016-06-23 00:36:26 +02:00
• 426262db53 Update README.md Matthias Clasen 2016-06-21 07:24:21 -04:00
• e6835ec992 Replace canonicalize_file_name with realpath(3) KARBOWSKI Piotr 2016-06-20 19:11:36 +02:00
• f6ca369012 build: put libraries in LDADD, not LDFLAGS Simon McVittie 2016-06-09 08:40:16 +01:00
• 6ad6c24bf3 Release 0.1.0 v0.1.0 Colin Walters 2016-06-02 11:56:05 -04:00
• 277b9a205e Add --unshare-user-try Alexander Larsson 2016-05-20 15:13:57 +02:00
• 318cad3980 Add --unshare-user-try export/flatpak/0.6.3 Alexander Larsson 2016-05-20 15:13:57 +02:00
• 068c810553 Allow operation on older kernels lacking /proc/[pid]/setgroups Tristan Van Berkom 2016-05-31 17:22:11 +09:00
• e0a07f4de7 Make setuid + no-unprivileged user namespaces work Alexander Larsson 2016-05-20 14:59:43 +02:00
• df4ae62d39 fixup! Make setuid + no-unprivileged user namespaces work export/flatpak/0.6.2 Alexander Larsson 2016-05-24 10:52:57 +02:00
• 2bdd130981 Add --unshare-user-try export/flatpak/0.6.1 Alexander Larsson 2016-05-20 15:13:57 +02:00
• c75b765d07 Make setuid + no-unprivileged user namespaces work Alexander Larsson 2016-05-20 14:59:43 +02:00
• fdf82f9b14 Use #pragma once for headers Colin Walters 2016-05-18 09:41:31 -04:00
• 649a4efbb8 Use struct initializer Mrunal Patel 2016-05-12 13:19:22 -07:00
• d69ab9202b Ran uncruftify.sh Alexander Larsson 2016-05-13 10:18:14 +02:00
• 4f21bd8f7c Add uncruftify config Alexander Larsson 2016-05-12 22:08:18 +02:00
• df925a6d00 send --help to stdout Lars Kellogg-Stedman 2016-05-12 15:58:27 -04:00
• f41af1ff04 Add support for --try-unshare-cgroup flag Mrunal Patel 2016-05-11 15:42:44 -07:00
• 9d3c07c0c7 Add support for --unshare-cgroup Mrunal Patel 2016-05-09 16:37:11 -07:00
• 4c943ddc5a Convert tabs to spaces Mrunal Patel 2016-05-12 10:11:51 -07:00
• 2fe416d264 More robust handler for OOM condition Pavel Odvody 2016-05-12 10:24:18 +02:00
• b9c39e5beb Fix fdwalk Alexander Larsson 2016-05-09 16:27:33 +02:00
• bf6e3564a3 utils: Rename strdup_printf -> xasprintf Colin Walters 2016-05-06 09:56:24 -04:00
• f525e670b8 Update documentation for --mqueue Mrunal Patel 2016-05-06 14:35:24 -07:00
• dad57eae09 Add support for mounting mqueue Mrunal Patel 2016-05-05 16:43:32 -07:00
• d470be9650 Update example to use --tmpfs for /tmp Mrunal Patel 2016-05-06 11:14:44 -07:00
• 5d83a36d0e Fix typos and whitespace Mrunal Patel 2016-05-06 10:56:04 -07:00
• 95184e95fe Limit maximum number of arguments to 9000 Colin Walters 2016-05-06 08:45:16 -04:00
• 3e97d7ebc9 Propagate exit status when not in a PID namespace Colin Walters 2016-05-06 08:21:08 -04:00
• 35e664940c SELinux: Combine label_valid and label_support into one function Dan Walsh 2016-05-06 09:44:29 -04:00
• 8c24bf04d7 Add .editorconfig and .dir-locals.el Colin Walters 2016-05-06 10:37:19 -04:00
• 4c18c78bf5 README.md: Note userns unavailablity in CentOS 7 and Debian Jessie Colin Walters 2016-05-06 09:39:40 -04:00
• cbbdaaab13 Add error handling for eventfd() and prctl(PR_SET_SECCOMP) Colin Walters 2016-05-06 09:20:41 -04:00
• a91f6a7469 utils: Add some __attribute__ annotations for format, noreturn Colin Walters 2016-05-06 09:09:03 -04:00
• 90c20f2c8e Don't support --args inside an --args file Alexander Larsson 2016-05-06 10:22:36 +02:00
• 055f58c245 Fix using --dev unprivileged (without --proc) Alexander Larsson 2016-05-06 12:29:40 +02:00
• 8a53e3a664 Add --tmpfs argument Alexander Larsson 2016-05-03 15:18:18 +02:00
• c6ad6021b3 Fix couple of typos Mrunal Patel 2016-05-05 16:47:43 -07:00
• 8ced4fbe51 README.md: Note some related projects Colin Walters 2016-05-05 14:25:19 -04:00
• 5601aae36c SELinux: Ensure we validate labels Dan Walsh 2016-05-05 09:30:37 -04:00
• 92fc223647 README: Link to CVE-2016-3135, describe vs userns better Colin Walters 2016-05-02 12:20:32 -04:00
• a4de436585 spec: Enable selinux by default Colin Walters 2016-05-01 13:08:53 -04:00
• 4a86c9745e spec: Enable man pages Colin Walters 2016-05-01 13:08:35 -04:00
• ff2430ccf3 Require CAP_NET_ADMIN Alexander Larsson 2016-04-29 12:55:30 +02:00
• 4ea7176ba9 packaging: Add a spec file Colin Walters 2016-04-22 08:57:26 -04:00
• c0725af71d Swap --share-user with --unshare-user, but auto-unshare if !setuid Colin Walters 2016-04-22 11:09:15 -04:00
• 7668e6e086 Add LGPLv2+ COPYING (and LICENSE symlink) Colin Walters 2016-04-22 09:24:37 -04:00
• c8c84fe486 build: Use git.mk Colin Walters 2016-04-21 16:58:22 -04:00
• 66d12bb23b Add bash completions Dan Walsh 2016-03-30 10:15:08 -04:00
• b3298904fc Ignore errors when writing to event_fd in a better way Alexander Larsson 2016-04-08 12:42:03 +02:00
• 57ec3c8816 .gitignore: ignore generated man Antonio Murdaca 2016-04-04 12:04:37 +02:00
• 980fd7bbfe Use 64bit capability syscalls Alexander Larsson 2016-03-30 10:47:06 +02:00
• fefeea889d utils: Squash const warnings for security contexts Colin Walters 2016-03-22 08:57:34 -04:00
• 20be9e9df6 main: Squash a compiler warning Colin Walters 2016-03-22 08:54:21 -04:00
• 080a031053 utils: Fix OOM error handling for vasprintf() Colin Walters 2016-03-22 08:52:57 -04:00
• 2c616a1eb5 build: Add SELinux and priv mode to build configuration output Colin Walters 2016-03-22 09:02:36 -04:00
• 701f211b9d Add configure flags to allow setting setuid/setcaps Alexander Larsson 2016-03-22 10:24:11 +01:00
• 506fb1b162 Add SELinux Support Dan Walsh 2016-03-17 18:03:02 -04:00
• aedbc794d5 README: Add some documentation about the sandbox Alexander Larsson 2016-03-17 16:08:48 +01:00
• 04e9ac7626 travis: Add a webhook comment Colin Walters 2016-03-16 09:35:30 -04:00
• fa0aad59bb README.md: Add a missing word Matthias Clasen 2016-03-15 15:28:54 -04:00
• e06ff186ce tests: Add a stub test framework Colin Walters 2016-03-15 09:18:36 -04:00
• bf3ae2166f main: EXIT_SUCCESS with --help Colin Walters 2016-03-15 09:17:44 -04:00
• f80ec233d2 Remove empty line at end Alexander Larsson 2016-03-15 16:17:39 +01:00
• 054416b0c7 Merge pull request #20 from cgwalters/travis Alexander Larsson 2016-03-15 10:06:18 +01:00
• 96466f29f7 Initial travis testing file Colin Walters 2016-03-14 12:30:50 -04:00
• 5f111bdc47 build: Add --enable-man, autodetect xsltproc Colin Walters 2016-03-14 13:16:18 -04:00
• 38ca0434ed utils: load_file_data() was growing buffer too large Alexander Larsson 2016-03-14 16:23:31 +01:00
• 9ca38bc600 Merge pull request #19 from mrunalp/caps_header Alexander Larsson 2016-03-10 23:16:46 +01:00
• b493feb70f Check for sys/capability.h during configure Mrunal Patel 2016-03-10 17:14:31 -05:00
• 81d3aa11f5 Clarify filesystem ops in manpage Alexander Larsson 2016-03-08 17:11:45 +01:00
• 4b87d00edf Merge pull request #18 from matthiasclasen/man Alexander Larsson 2016-03-08 17:08:33 +01:00
• 38a62a7cc5 Merge pull request #17 from matthiasclasen/seccomp-error Alexander Larsson 2016-03-08 17:07:06 +01:00
• 2ecee82f19 docs: Some more intro Matthias Clasen 2016-03-08 10:28:40 -05:00
• 502e388616 docs: Add an Environment section Matthias Clasen 2016-03-08 10:24:12 -05:00
• eaa7f3f8dc docs: Explain --seccomp data format Matthias Clasen 2016-03-08 10:09:30 -05:00
• 122f3ffa4c docs: Add details about options Matthias Clasen 2016-03-08 10:02:46 -05:00