projects
/
oweals
/
procd.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅ next
jail: mount /sys read-only
[oweals/procd.git]
/
jail
/
jail.c
2020-04-13
Daniel Golle
jail: mount /sys read-only
blob
|
commitdiff
|
raw
2020-04-13
Daniel Golle
jail: make /proc more secure
blob
|
commitdiff
|
raw
|
diff to current
2020-04-12
Daniel Golle
jail: only mess with rootfs if CLONE_NEWNS was set
blob
|
commitdiff
|
raw
|
diff to current
2020-04-09
Daniel Golle
jail: add support for (ram-)overlayfs
blob
|
commitdiff
|
raw
|
diff to current
2020-04-09
Daniel Golle
jail: add support for userns and cgroupsns
blob
|
commitdiff
|
raw
|
diff to current
2020-04-09
Daniel Golle
jail: add support for launching extroot containers
blob
|
commitdiff
|
raw
|
diff to current
2020-03-12
Daniel Golle
jail: mount-bind /etc/resolv.conf for non-netns jails
blob
|
commitdiff
|
raw
|
diff to current
2020-01-21
Daniel Golle
jail: more strict mount options for /tmp/resolv.conf.d/
blob
|
commitdiff
|
raw
|
diff to current
2020-01-21
Daniel Golle
jail: create resolv.conf symlink for netns jails
blob
|
commitdiff
|
raw
|
diff to current
2020-01-21
Daniel Golle
jail: add basic support for network namespaces
blob
|
commitdiff
|
raw
|
diff to current
2019-12-30
Daniel Golle
jail: remove accidentally added lines
blob
|
commitdiff
|
raw
|
diff to current
2019-12-30
Daniel Golle
jail: set user and group inside jail
blob
|
commitdiff
|
raw
|
diff to current
2018-01-02
Rosen Penev
procd: Replace strerror(errno) with %m.
blob
|
commitdiff
|
raw
|
diff to current
2017-02-08
John Crispin
ujail: fix signal forwarding
blob
|
commitdiff
|
raw
|
diff to current
2017-01-10
Etienne CHAMPETIER
ujail: add basic /dev files
blob
|
commitdiff
|
raw
|
diff to current
2016-12-02
Felix Fietkau
ujail: send SIGKILL to jail process if SIGTERM fails
blob
|
commitdiff
|
raw
|
diff to current
2016-06-03
Etienne CHAMPETIER
jail: don't always CLONE_NEWUTS
blob
|
commitdiff
|
raw
|
diff to current
2016-06-01
Etienne CHAMPETIER
jail: ensure mounts are not MS_SHARED to avoid pivot_ro...
blob
|
commitdiff
|
raw
|
diff to current
2016-06-01
Etienne CHAMPETIER
jail: improve some logs
blob
|
commitdiff
|
raw
|
diff to current
2016-06-01
Etienne CHAMPETIER
jail: don't include capabilities config (-C) inside...
blob
|
commitdiff
|
raw
|
diff to current
2016-06-01
Etienne CHAMPETIER
jail: call build_envp() just before execve()
blob
|
commitdiff
|
raw
|
diff to current
2016-06-01
Etienne CHAMPETIER
jail: regroup add_path_and_deps() calls
blob
|
commitdiff
|
raw
|
diff to current
2016-06-01
Etienne CHAMPETIER
jail: call chdir(/) after pivot_root()
blob
|
commitdiff
|
raw
|
diff to current
2015-12-11
Etienne CHAMPETIER
ujail: split name (-n) and hostname (-h) options
blob
|
commitdiff
|
raw
|
diff to current
2015-12-11
Etienne CHAMPETIER
ujail: add no_new_privs (-c) option
blob
|
commitdiff
|
raw
|
diff to current
2015-12-11
Etienne CHAMPETIER
instance, ujail: remove "-P <path>" option
blob
|
commitdiff
|
raw
|
diff to current
2015-12-11
Etienne CHAMPETIER
ujail: fixup code style // -> /* */
blob
|
commitdiff
|
raw
|
diff to current
2015-11-27
Etienne CHAMPETIER
ujail: rework fs jail part
blob
|
commitdiff
|
raw
|
diff to current
2015-11-27
Etienne CHAMPETIER
ujail: remove some debug/dev hack
blob
|
commitdiff
|
raw
|
diff to current
2015-11-27
Etienne CHAMPETIER
ujail: fixup code style: "func()" -> "func(void)"
blob
|
commitdiff
|
raw
|
diff to current
2015-11-27
Etienne CHAMPETIER
ujail: add init_library_search()
blob
|
commitdiff
|
raw
|
diff to current
2015-11-27
Etienne CHAMPETIER
ujail: use PATH_MAX for path related buffers
blob
|
commitdiff
|
raw
|
diff to current
2015-11-27
Etienne CHAMPETIER
ujail: search libs in /lib before /lib64
blob
|
commitdiff
|
raw
|
diff to current
2015-11-27
Etienne CHAMPETIER
ujail: remove "#include log.h" from elf.h
blob
|
commitdiff
|
raw
|
diff to current
2015-11-27
Etienne CHAMPETIER
ujail: add <stdio.h> to log.h
blob
|
commitdiff
|
raw
|
diff to current
2015-11-27
Etienne CHAMPETIER
ujail: use more const in elf.*
blob
|
commitdiff
|
raw
|
diff to current
2015-11-27
Etienne CHAMPETIER
ujail: don't pass unused arg in clone call
blob
|
commitdiff
|
raw
|
diff to current
2015-10-08
Etienne CHAMPETIER
jail: Add MS_NODEV MS_NOEXEC MS_NOSUID mount options...
blob
|
commitdiff
|
raw
|
diff to current
2015-10-07
Etienne CHAMPETIER
jail: allow to not use namespaces
blob
|
commitdiff
|
raw
|
diff to current
2015-10-07
Etienne CHAMPETIER
jail: cleanup include
blob
|
commitdiff
|
raw
|
diff to current
2015-10-07
Etienne CHAMPETIER
jail: add capabilities support
blob
|
commitdiff
|
raw
|
diff to current
2015-10-03
Etienne CHAMPETIER
jail: reworks & cleanups
blob
|
commitdiff
|
raw
|
diff to current
2015-07-24
Etienne CHAMPETIER
jail: fix jail root folder permissions
blob
|
commitdiff
|
raw
|
diff to current
2015-03-28
John Crispin
properly handle return codes
blob
|
commitdiff
|
raw
|
diff to current
2015-03-27
John Crispin
make it optional to remount the tmpfs as ro
blob
|
commitdiff
|
raw
|
diff to current
2015-03-23
John Crispin
add initial version of ujail and utrace
blob
|
commitdiff
|
raw
|
diff to current
projects / oweals / procd.git / history