next -> master #30

Especially with exile_launch(), we will be included
from more than one translation unit. Thus, ODR becomes
a headache now.

So move definitions to exile.c.

70c3fef500 exile.h: Retire static child_read/write_pipe vars

98421fab90 Makefile: Build exile.o separately, link it in all tests

dbf8e87440 exile.hpp: Mark do_clone inline, not static

66def7a28f append_syscall_to_bpf(): Check for unlikely case of too many sock_filters

ea66ef76eb exile_flags_to_landlock(): Cover more with ALL_WRITE, except devices

More consistent with mount(), where MS_NODEV disallows those.

We may need to introduce a flag that simply allows everything

crtxcr が next を強制プッシュ ( 1d6861944c から 3fa73b0b97 へ ) 2022-07-17 13:01:25 +02:00 比較

crtxcr が 2 コミット追加 2022-08-16 23:13:36 +02:00

6628bf4fb7 README: Update and minor improvements

e711a1d53a exile_landlock_is_available(): Fix availability check

The check only assumed the existance of ABI version 1, which
is not the case any more.

Closes: https://github.com/quitesimpleorg/exile.h/issues/1

crtxcr が 3 コミット追加 2022-10-23 19:55:32 +02:00

ff60ec227d perform_mounts(): Fix potential leak and fix iteration

We would not free 'concat_path' in all potential paths.
Also, the iteration would not continue potentially.

This was case unlikely to be hit in practise.

b5f83499f3 exile_append_syscall_policy(): Add missing free()

40d23af355 concat_path(): Add missing free() calls

このブランチは既にターゲットブランチに含まれています。マージするものはありません。

コマンドラインの手順も確認できます。