projects / project / procd.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
jail: protect against strcat buffer overflows
2021-08-24 Daniel Gollejail: protect against strcat buffer overflows
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-24 Daniel Gollejail: preload: avoid NULL-dereference in case things...
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-24 Daniel Golletrace: handle open() return value and make sure string...
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-24 Daniel Golletrace: free string returned by blobmsg_format_json_indent()
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-24 Daniel Golleuxc: free string returned by blobmsg_format_json_indent()
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-24 Daniel Golleutils: make sure read() string is 0 terminated
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-24 Daniel Gollejail: use portable sizeof(void *)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-24 Daniel Gollejail: check return value when opening console
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-24 Daniel Gollejail: return to hook callback instead of just calling it
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-24 Daniel Gollejail: devices: create parent folder when creating devices
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-15 Daniel Golleuxc: support config in uvol
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-15 Daniel Golleuxc: fix help output
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-15 Daniel Golleuxc: fix a bunch of issues discovered by Coverity
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-15 Daniel Golleservice: make sure string read is null terminated
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-15 Daniel Gollesystem: fix issues reported by Coverity
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-14 Daniel Golleujail-console: add missing error handling discovered...
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-14 Daniel Gollejail: fix several issues discovered by Coverity
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-14 Daniel Gollehotplug-dispatch: yet another rare memory leak disovered...
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-13 Daniel Gollesystem: make rootfs type accessible through board call
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-05 Daniel Gollehotplug-dispatch: fix rare memory leaks in error paths
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-04 Daniel Gollejail: cgroups-bpf: fix compile with musl 1.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-04 Daniel Gollejail: don't ignore return value of write()
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-04 Daniel Gollejail: cgroups: replace wrongly used assert()
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-04 Daniel Gollehotplug-dispatch: replace wrongly used assert()
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-04 Daniel Golleuxc: always handle asprintf() return value
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-04 Daniel Gollehotplug-dispatch: don't ignore asprintf() return value
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-04 Daniel Gollejail: ignore return value when creating default /dev...
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-04 Daniel Gollejail: don't ignore return value of seteuid()
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-08-04 Daniel Gollejail: cgroups-bpf: don't use sys/reg.h when building...
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-07-24 Daniel Golleuxc: resolve volume UUIDs by name of UCI fstab section
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-07-24 Daniel Golleuxc: don't restart containers when mount shows up
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-07-18 Daniel Gollejail: refactor directory handling for rootfs and overlaydir
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-07-17 Daniel Gollejail: make use of realpath() for rootfs and overlaydir
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-07-15 Daniel Golleuxc: check for required blockd mounts
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-07-15 Daniel Gollejail: open() extroot folder before mounting
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-07-15 Daniel Gollejail: allow rootfs to be a symbolic link
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-07-15 Daniel Gollejail: increase max additional env records to 64
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-07-15 Daniel Gollejail: do not hack /etc/resolv.conf on container rootfs
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-07-15 Daniel Golleuxc: implement support for rootfs overlay in containers
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-07-10 Daniel Gollejail: add support for cgroup devices as in OCI run...
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-03-19 Daniel Golletrace: fix build on aarch64
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-03-19 Daniel Gollejail/seccomp: add support for aarch64
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-03-07 Daniel Golleutils: fix C style in header file
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-02-23 Daniel Gollesystem: expose if system was booted from initramfs
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-02-13 Daniel Gollecosmetics: provide compatible system info on Aarch64
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-02-07 Daniel Golleprocd: add hotplug-call dispatcher
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-02-02 Daniel Gollejail: cgroups: fix uninitialized variable
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-02-02 Daniel Gollejail: only output BPF instr. table header if debugging
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2021-02-02 Daniel Gollejail: remove duplicate check for hook file permissions
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-12-12 Daniel Golletreewide: replace local mkdir_p implementations
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-12-09 Daniel Gollejail: remove unreachable code
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-12-04 Daniel Golleearly: fall-back to run ubus as root if user can't...
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-12-01 Daniel Gollejail: improve seccomp log output
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-30 Daniel Gollejail: seccomp: improve code readability
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-30 Daniel Gollejail: always call cgroups_free()
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-30 Daniel Gollejail: improve seccomp BPF generator
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-27 Daniel Gollejail: properly initialize timens_fd
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-27 Daniel Gollejail: enter existing cgroups namespace if given
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-27 Daniel Gollejail: don't attempt to mount /sys with noatime
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-27 Daniel Gollejail: fix typo in usage output
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-27 Daniel Gollejail: seteuid before clone(CLONE_NEWUSER)
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-27 Daniel Gollejail: don't fail if can't mount-bind /etc/resolv.conf
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-27 Daniel Gollejail: don't use NULL arguments for mount syscall
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-27 Daniel Gollejail: relax /etc/resolv.conf creation
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-27 Daniel Gollejail: fix and simplify userns uid/gid maps from OCI
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-27 Daniel Gollejail: fix segfault on missing name and refactor
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-27 Daniel Gollejail: leak less memory
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-22 Daniel Gollejail: add 'debug' extern variable to preload_seccomp
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-22 Daniel Golleuxc: also delete procd runtime state on 'delete'
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-22 Daniel Golleuxc: fix incomplete commit
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-21 Daniel Gollejail: cgroup hack: rewrite cgroup -> cgroup2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-21 Daniel Golleseccomp: silence 'unknown syscall' warnings
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-21 Daniel Golleuxc: make force-delete kill container process
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-17 Daniel Golletrace: switch to OCI seccomp JSON output
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-15 Daniel Golleseccomp: switch to new OCI compliant parser
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-15 Daniel Golleseccomp: specifying architectures is optional
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-11-07 Daniel Gollejail: fix capabilities
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-10-28 Daniel Golleuxc: mimic runc cmdline by using getopt_long
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-10-28 Daniel Gollejail: don't fail if maskedPath cannot be found
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-10-28 Daniel Gollejail: add support for absolute root path in OCI spec
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-10-28 Daniel Gollejail: relax seccomp unknown syscall handling
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-10-28 Daniel Gollejail: handle mount propagation flags
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-10-28 Daniel Gollejail: add option for pidfile
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-10-28 Daniel Gollejail: guard boolean blobmsg attributes
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-10-23 Daniel Golleujail: elf: work around GCC bug on MIPS64
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-10-22 Daniel Gollejail: mount more stuff read-only
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-10-21 Daniel Gollejail: capabilities: apply in two phases
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-10-19 Daniel Gollejail: nuke old capabilities code in favour of reusing...
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-10-19 Daniel Golleinstance: actually wire up capabilities filename
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-10-19 Daniel Gollejail: adapt to new ubus socket path
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-10-19 Daniel Golleearly: run ubusd non-root as user ubus, group ubus
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-08-13 Daniel Gollecgroups: memory controller fixes
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-08-13 Daniel Gollecgroups: restrict allowed keys in 'unified' section
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-08-06 Daniel Gollejail: fix freeing cgroups avl
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-08-06 Daniel Gollejail: only free cgroups if they were allocated
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-08-06 Daniel Gollejail: parse OCI cgroups resources
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-08-06 Daniel Golleinstance: add instances into unified cgroup hierarchy
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-08-06 Daniel Gollejail: make use of BLOBMSG_CAST_INT64 for OCI rlimits
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-08-06 Daniel Gollejail: use pidns semantics also for timens
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
2020-08-06 Daniel Golleinitd: attempt to mount cgroup2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
 commit | commitdiff | tree
next
OpenWrt service / process manager