next -> master #30

Especially with exile_launch(), we will be included
from more than one translation unit. Thus, ODR becomes
a headache now.

So move definitions to exile.c.

exile.h: Retire static child_read/write_pipe vars 70c3fef500

Makefile: Build exile.o separately, link it in all tests 98421fab90

exile.hpp: Mark do_clone inline, not static dbf8e87440

append_syscall_to_bpf(): Check for unlikely case of too many sock_filters 66def7a28f

exile_flags_to_landlock(): Cover more with ALL_WRITE, except devices ea66ef76eb

More consistent with mount(), where MS_NODEV disallows those.

We may need to introduce a flag that simply allows everything

crtxcr vynucené nahrání next od 1d6861944c do 3fa73b0b97

2022-07-17 13:01:25 +02:00

Porovnat

crtxcr přidal/a 2 commity 2022-08-16 23:13:36 +02:00

README: Update and minor improvements 6628bf4fb7

exile_landlock_is_available(): Fix availability check e711a1d53a

The check only assumed the existance of ABI version 1, which
is not the case any more.

Closes: https://github.com/quitesimpleorg/exile.h/issues/1

crtxcr přidal/a 3 commity 2022-10-23 19:55:32 +02:00

perform_mounts(): Fix potential leak and fix iteration ff60ec227d

We would not free 'concat_path' in all potential paths.
Also, the iteration would not continue potentially.

This was case unlikely to be hit in practise.

exile_append_syscall_policy(): Add missing free() b5f83499f3

concat_path(): Add missing free() calls 40d23af355

Tato větev je již součástí cílové větve. Není co sloučit.

Zobrazit instrukce příkazové řádky.