trace: use standard POSIX header for basename()
[project/procd.git] / jail /
2023-01-16 Daniel Gollejail: don't assume positive return value of creat
2023-01-16 Daniel Gollejail: fs: don't overwrite existing mount target
2022-11-10 Yuteng Zhongjail: ignore missing .dynamic sect
2022-11-10 Philipp Meierjail: correctly check for null pointer
2022-07-17 Christian Marangijail: fix various ignoring return value compilation...
2022-07-17 Christian Marangijail: add WARNING macro to log non critical warning...
2022-04-13 Daniel Gollejail: include necessary files for per-netns netifd...
2022-01-11 Roman Azarenkoprocd: jail/cgroups: correctly enable "rdma" when requested
2021-12-20 Daniel Golleremove ujail-console
2021-12-11 Daniel Gollejail: make sure jailed process is terminated
2021-11-11 Daniel Gollejail: allow passing environment variable to procd jaile...
2021-11-01 Hauke Mehrtensjail: elf: Remove MIPS 64 warning
2021-11-01 Hauke Mehrtensjail: elf: Use 64 bit variables for elf offsets
2021-10-22 Hauke Mehrtensjail: Fix build with glibc
2021-10-17 Daniel Gollejail: netifd: check target netns fd before using it
2021-10-17 Daniel Gollejail: netifd: fix error handling issue reported by...
2021-10-17 Daniel Gollejail: netifd: code cosmetics
2021-10-12 Daniel Gollejail: make use of per-container netifd via ubus
2021-10-12 Daniel Gollejail: netifd: generate netifd uci config and mount it
2021-10-12 Daniel Gollejail: fs: add support for asymmetric mount bind
2021-09-15 Daniel Gollejail: start ubus and netifd instances for container...
2021-09-15 Daniel GolleRevert "jail: do not hack /etc/resolv.conf on container...
2021-09-15 Daniel Gollejail: prepare for adding process to existing namespace
2021-08-30 Daniel Gollejail: actually check calloc return value
2021-08-24 Daniel Gollejail: protect against strcat buffer overflows
2021-08-24 Daniel Gollejail: preload: avoid NULL-dereference in case things...
2021-08-24 Daniel Gollejail: use portable sizeof(void *)
2021-08-24 Daniel Gollejail: check return value when opening console
2021-08-24 Daniel Gollejail: return to hook callback instead of just calling it
2021-08-24 Daniel Gollejail: devices: create parent folder when creating devices
2021-08-14 Daniel Golleujail-console: add missing error handling discovered...
2021-08-14 Daniel Gollejail: fix several issues discovered by Coverity
2021-08-04 Daniel Gollejail: cgroups-bpf: fix compile with musl 1.2
2021-08-04 Daniel Gollejail: don't ignore return value of write()
2021-08-04 Daniel Gollejail: cgroups: replace wrongly used assert()
2021-08-04 Daniel Gollejail: ignore return value when creating default /dev...
2021-08-04 Daniel Gollejail: don't ignore return value of seteuid()
2021-08-04 Daniel Gollejail: cgroups-bpf: don't use sys/reg.h when building...
2021-07-18 Daniel Gollejail: refactor directory handling for rootfs and overlaydir
2021-07-17 Daniel Gollejail: make use of realpath() for rootfs and overlaydir
2021-07-15 Daniel Gollejail: open() extroot folder before mounting
2021-07-15 Daniel Gollejail: allow rootfs to be a symbolic link
2021-07-15 Daniel Gollejail: increase max additional env records to 64
2021-07-15 Daniel Gollejail: do not hack /etc/resolv.conf on container rootfs
2021-07-10 Daniel Gollejail: add support for cgroup devices as in OCI run...
2021-03-19 Daniel Gollejail/seccomp: add support for aarch64
2021-03-02 Rosen Penevprocd: fix compilation with newer musl
2021-02-02 Daniel Gollejail: cgroups: fix uninitialized variable
2021-02-02 Daniel Gollejail: only output BPF instr. table header if debugging
2021-02-02 Daniel Gollejail: remove duplicate check for hook file permissions
2020-12-12 Daniel Golletreewide: replace local mkdir_p implementations
2020-12-09 Daniel Gollejail: remove unreachable code
2020-12-01 Daniel Gollejail: improve seccomp log output
2020-11-30 Daniel Gollejail: seccomp: improve code readability
2020-11-30 Daniel Gollejail: always call cgroups_free()
2020-11-30 Daniel Gollejail: improve seccomp BPF generator
2020-11-27 Daniel Gollejail: properly initialize timens_fd
2020-11-27 Daniel Gollejail: enter existing cgroups namespace if given
2020-11-27 Daniel Gollejail: don't attempt to mount /sys with noatime
2020-11-27 Daniel Gollejail: fix typo in usage output
2020-11-27 Daniel Gollejail: seteuid before clone(CLONE_NEWUSER)
2020-11-27 Daniel Gollejail: don't fail if can't mount-bind /etc/resolv.conf
2020-11-27 Daniel Gollejail: don't use NULL arguments for mount syscall
2020-11-27 Daniel Gollejail: relax /etc/resolv.conf creation
2020-11-27 Daniel Gollejail: fix and simplify userns uid/gid maps from OCI
2020-11-27 Daniel Gollejail: fix segfault on missing name and refactor
2020-11-27 Daniel Gollejail: leak less memory
2020-11-22 Daniel Gollejail: add 'debug' extern variable to preload_seccomp
2020-11-21 Daniel Gollejail: cgroup hack: rewrite cgroup -> cgroup2
2020-11-21 Daniel Golleseccomp: silence 'unknown syscall' warnings
2020-11-15 Daniel Golleseccomp: switch to new OCI compliant parser
2020-11-15 Daniel Golleseccomp: specifying architectures is optional
2020-11-07 Daniel Gollejail: fix capabilities
2020-10-28 Daniel Gollejail: don't fail if maskedPath cannot be found
2020-10-28 Daniel Gollejail: add support for absolute root path in OCI spec
2020-10-28 Daniel Gollejail: relax seccomp unknown syscall handling
2020-10-28 Daniel Gollejail: handle mount propagation flags
2020-10-28 Daniel Gollejail: add option for pidfile
2020-10-28 Daniel Gollejail: guard boolean blobmsg attributes
2020-10-23 Daniel Golleujail: elf: work around GCC bug on MIPS64
2020-10-22 Daniel Gollejail: mount more stuff read-only
2020-10-21 Daniel Gollejail: capabilities: apply in two phases
2020-10-19 Daniel Gollejail: nuke old capabilities code in favour of reusing...
2020-10-19 Daniel Gollejail: adapt to new ubus socket path
2020-08-13 Daniel Gollecgroups: memory controller fixes
2020-08-13 Daniel Gollecgroups: restrict allowed keys in 'unified' section
2020-08-06 Daniel Gollejail: fix freeing cgroups avl
2020-08-06 Daniel Gollejail: only free cgroups if they were allocated
2020-08-06 Daniel Gollejail: parse OCI cgroups resources
2020-08-06 Daniel Gollejail: make use of BLOBMSG_CAST_INT64 for OCI rlimits
2020-08-06 Daniel Gollejail: use pidns semantics also for timens
2020-07-29 Daniel Gollejail: add 'kill' method to container.%s object
2020-07-28 Daniel Gollejail: add some remaining OCI features
2020-07-25 Daniel Gollejail: serialize hook execution
2020-07-25 Daniel Gollejail: fix build on glibc and uclibc
2020-07-21 Daniel Gollejail: add support for referencing existing namespaces
2020-07-20 Rosen Penevjail: fix wrong format for 32-bit
2020-07-20 Daniel Gollejail: re-implement /proc/sys/net read-write in netns...
2020-07-20 Daniel Gollejail: refactor default mounts into new structure
2020-07-20 Daniel Gollejail: actually apply filesystem-specific mount options
next