Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | Introduced the protocol->jail binary packet.feature/jail_packet | lns | 2019-02-04 |
| | | | | | | | | We are using a handler/callback functions to obtain additional information from the protocol handler and transmit it to the sandbox. Signed-off-by: lns <matzeton@googlemail.com> | ||
* | setup basic jail packet structs/funcs | Toni Uhlig | 2018-08-11 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | user-namepsace: use macro instead of commenting out uid-mapping setup | lns | 2018-08-10 |
| | | | | Signed-off-by: lns <matzeton@googlemail.com> | ||
* | use potd event buffer as epoll data instead of a fd | lns | 2018-08-07 |
| | | | | Signed-off-by: lns <matzeton@googlemail.com> | ||
* | additional autoconf check for ambient raise securebit to support kernels ↵ | Toni Uhlig | 2018-08-02 |
| | | | | | | prior 4.3 Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | set PR_SET_SECUREBITS and PR_SET_NO_NEW_PRIVS | lns | 2018-08-02 |
| | | | | Signed-off-by: lns <matzeton@googlemail.com> | ||
* | Merge branch 'master' of ssh://127.0.0.1:2223/git/potd | lns | 2018-07-23 |
|\ | |||
| * | fixed typo, temporarily disabled selftest functions (for some reason they ↵ | Toni Uhlig | 2018-07-20 |
| | | | | | | | | | | | | dont work on CI) Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | | force flawfinder to ignore false-positives for correctly used functions such ↵ | lns | 2018-07-23 |
|/ | | | | | | as realpath, snprintf, vsnprintf, etc Signed-off-by: lns <matzeton@googlemail.com> | ||
* | ArchLinux: fixed compiler warnings (libc functions marked with | lns | 2018-07-18 |
| | | | | | | warn_unused_result) Signed-off-by: lns <matzeton@googlemail.com> | ||
* | Copyright info updated | Toni Uhlig | 2018-07-18 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | updated copyright informations | Toni Uhlig | 2018-07-11 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | libseccomp is now optional but still recommended | Toni Uhlig | 2018-06-25 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | fixed blacklisting issues after safe_chroot, main jail-client process does ↵ | Toni Uhlig | 2018-06-23 |
| | | | | | | not chroot anymore Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | improved filesystem managment (blacklisting, mounting read-only/read-write ↵ | Toni Uhlig | 2018-06-23 |
| | | | | | | objects), improved jail/pty handling Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | check if a file path is an mountpoint (not only directories) | Toni Uhlig | 2018-06-18 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | jail multiple netns mount fix | Toni Uhlig | 2018-06-17 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | POTD skeleton. | lns | 2018-06-13 |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com> |