| 
						
					 | 
					
						
						
							
						
						ff2bc24c6b
					 | 
					
						
						
							
							only create chroot directory when path policies are available
						
						
						
						
						
						
					 | 
					
						2019-12-07 23:26:27 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						7547644013
					 | 
					
						
						
							
							silence multiple compiler warnings
						
						
						
						
						
						
					 | 
					
						2019-11-17 15:13:25 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						8f104a231c
					 | 
					
						
						
							
							bugfix: qssb_enable_policy: pointer to stack-local variable
						
						
						
						
						
						
					 | 
					
						2019-11-17 12:50:27 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						fbf51e095f
					 | 
					
						
						
							
							introduce path policies, replacing readonly/writable paths vars
						
						
						
						
						
						
					 | 
					
						2019-11-16 23:35:08 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						1b8504c052
					 | 
					
						
						
							
							updated README
						
						
						
						
						
						
					 | 
					
						2019-11-15 21:53:26 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						6f1b27ee51
					 | 
					
						
						
							
							qssb_init_policy: explicit cast (for C++)
						
						
						
						
						
						
					 | 
					
						2019-11-15 21:40:56 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						ee6bd18027
					 | 
					
						
						
							
							begin a default blacklist of syscalls
						
						
						
						
						
						
					 | 
					
						2019-11-15 21:17:33 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						8298a30e7c
					 | 
					
						
						
							
							make PATH_MAX consistent across all buffers throughout the code
						
						
						
						
						
						
					 | 
					
						2019-11-10 12:29:53 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						338e578350
					 | 
					
						
						
							
							seccomp_enable: fix unused default_action parameter
						
						
						
						
						
						
					 | 
					
						2019-11-10 12:10:37 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						069349eaf6
					 | 
					
						
						
							
							generate a random directory for chroot if none given
						
						
						
						
						
						
					 | 
					
						2019-11-10 12:08:35 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						1de1ae0b32
					 | 
					
						
						
							
							introduce bitmasks indicating which namespaces to unshare
						
						
						
						
						
						
					 | 
					
						2019-11-09 21:13:40 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						bad600b3a8
					 | 
					
						
						
							
							set #defines only if not set already
						
						
						
						
						
						
					 | 
					
						2019-11-09 20:55:12 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						a7c6ef6c57
					 | 
					
						
						
							
							bind mount recursively
						
						
						
						
						
						
					 | 
					
						2019-11-09 16:27:54 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						7a2cf18c19
					 | 
					
						
						
							
							check drop_caps() return value ; silence compiler warning
						
						
						
						
						
						
					 | 
					
						2019-11-09 15:47:08 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 | 
				
			
				
					| 
						
					 | 
					
						
						
							
						
						200cd7878c
					 | 
					
						
						
							
							Initial commit
						
						
						
						
						
						
					 | 
					
						2019-11-09 15:41:54 +01:00 | 
					
					
						
						
						
							
							
							
							
							
							
						
					 |