 Albert S.
|
ff2bc24c6b
|
only create chroot directory when path policies are available
|
2019-12-07 23:26:27 +01:00 |
|
Albert S.
|
7547644013
|
silence multiple compiler warnings
|
2019-11-17 15:13:25 +01:00 |
|
Albert S.
|
8f104a231c
|
bugfix: qssb_enable_policy: pointer to stack-local variable
|
2019-11-17 12:50:27 +01:00 |
|
Albert S.
|
fbf51e095f
|
introduce path policies, replacing readonly/writable paths vars
|
2019-11-16 23:35:08 +01:00 |
|
Albert S.
|
1b8504c052
|
updated README
|
2019-11-15 21:53:26 +01:00 |
|
Albert S.
|
6f1b27ee51
|
qssb_init_policy: explicit cast (for C++)
|
2019-11-15 21:40:56 +01:00 |
|
Albert S.
|
ee6bd18027
|
begin a default blacklist of syscalls
|
2019-11-15 21:17:33 +01:00 |
|
Albert S.
|
8298a30e7c
|
make PATH_MAX consistent across all buffers throughout the code
|
2019-11-10 12:29:53 +01:00 |
|
Albert S.
|
338e578350
|
seccomp_enable: fix unused default_action parameter
|
2019-11-10 12:10:37 +01:00 |
|
Albert S.
|
069349eaf6
|
generate a random directory for chroot if none given
|
2019-11-10 12:08:35 +01:00 |
|
Albert S.
|
1de1ae0b32
|
introduce bitmasks indicating which namespaces to unshare
|
2019-11-09 21:13:40 +01:00 |
|
Albert S.
|
bad600b3a8
|
set #defines only if not set already
|
2019-11-09 20:55:12 +01:00 |
|
Albert S.
|
a7c6ef6c57
|
bind mount recursively
|
2019-11-09 16:27:54 +01:00 |
|
Albert S.
|
7a2cf18c19
|
check drop_caps() return value ; silence compiler warning
|
2019-11-09 15:47:08 +01:00 |
|
Albert S.
|
200cd7878c
|
Initial commit
|
2019-11-09 15:41:54 +01:00 |