summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Merge pull request #554 from smcv/disable-userns-tests-rootHEADmainSimon McVittie2023-05-041-3/+12
|\
| * tests: Try harder to evade --disable-usernsSimon McVittie2023-02-231-0/+9
| * tests: Explicitly unshare userns when testing --disable-usernsSimon McVittie2023-02-231-3/+3
* | Merge pull request #559 from cgzones/compilerSimon McVittie2023-05-046-55/+50
|\ \
| * | Declare file local variables staticChristian Göttsche2023-02-281-29/+29
| * | Use mode_t as parameter type in mkdir_with_parentsChristian Göttsche2023-02-282-2/+2
| * | Drop unnecessary cast to same typeChristian Göttsche2023-02-281-1/+1
| * | Avoid implicit conversionsChristian Göttsche2023-02-281-3/+3
| * | Enable and resolve sign comparisson warningsChristian Göttsche2023-02-285-20/+15
* | | bwrap.xml: Get umbrella project back in syncSebastian Pipping2023-04-031-1/+1
* | | bwrap.xml: Mention CVE-2017-5226 with --new-sessionSebastian Pipping2023-04-031-1/+3
* | | bwrap.xml: Get product intro back in syncSebastian Pipping2023-04-031-1/+2
* | | README.md: Mention --new-session in section "Sandboxing"Sebastian Pipping2023-04-031-0/+5
* | | README.md: Add --new-session to usage exampleSebastian Pipping2023-04-031-0/+1
* | | README.md: Improve readability of usage exampleSebastian Pipping2023-04-031-1/+7
* | | README, SECURITY: Clarify that bubblewrap does not define a security modelSimon McVittie2023-03-302-2/+62
* | | Merge pull request #558 from cgzones/closeSimon McVittie2023-03-021-7/+1
|\ \ \
| * | | load_file_data: do not close fd on error to avoid double-closeChristian Göttsche2023-03-011-7/+1
| |/ /
* | | Merge pull request #562 from cgzones/cap_exampleSimon McVittie2023-03-021-1/+2
|\ \ \ | |/ / |/| |
| * | bwrap.1: mention example format of capabilityChristian Göttsche2023-03-021-1/+2
|/ /
* | Prepare v0.8.0v0.8.0Simon McVittie2023-02-272-2/+2
|/
* Merge pull request #550 from smcv/seccomp-einval-hintSimon McVittie2023-02-171-1/+9
|\
| * Attempt to clarify error message for missing CONFIG_SECCOMP_FILTERSimon McVittie2023-01-231-1/+9
|/
* test-run: Filter out no-new-privs in capsh outputSimon McVittie2023-01-041-2/+3
* Add --assert-userns-disabled optionSimon McVittie2023-01-035-9/+30
* Add an option to disable nested user namespaces by setting limit to 1Simon McVittie2023-01-035-7/+73
* Merge pull request #539 from smcv/test-sizeSimon McVittie2022-11-211-21/+33
|\
| * test-run: Don't rely on df supporting the --output=size optionSimon McVittie2022-11-071-1/+6
| * test-run: If bubblewrap is setuid, assert that --size is not allowedSimon McVittie2022-11-071-21/+28
|/
* Prepare v0.7.0v0.7.0Simon McVittie2022-11-072-2/+2
* Fix copy/paste error in help for --pidnsSimon McVittie2022-10-271-1/+1
* Merge pull request #441 from smcv/as-ifSimon McVittie2022-10-271-16/+14
|\
| * build: Consistently use AS_IF instead of if/then/fiSimon McVittie2022-01-311-16/+14
* | Merge pull request #509 from tomsmeding/tmpfs-sizeSimon McVittie2022-10-265-41/+207
|\ \
| * | --size: Update completions and documentationTom Smeding2022-10-263-2/+46
| * | Tests for --size and --permsTom Smeding2022-10-261-1/+58
| * | Add --size option to control size of a --tmpfsTom Smeding2022-10-261-18/+93
| * | Prepare for multiple different modifier optionsTom Smeding2022-05-141-21/+11
* | | Merge pull request #487 from smcv/better-enospc-messageSimon McVittie2022-10-031-0/+3
|\ \ \
| * | | Improve error message when clone() fails with ENOSPCSimon McVittie2022-03-221-0/+3
* | | | Merge pull request #527 from a1346054/fixesSimon McVittie2022-09-131-1/+1
|\ \ \ \
| * | | | test-run: replace nonstandard `which`a13460542022-09-121-1/+1
|/ / / /
* | | | bind-mount: Include failing path in error messageSimon McVittie2022-08-163-26/+59
* | | | Merge pull request #510 from smcv/etc-shadowSimon McVittie2022-07-261-1/+8
|\ \ \ \
| * | | | test-run: Add another assertion that we cannot read /etc/shadowSimon McVittie2022-05-111-0/+6
| * | | | test-run: Skip a test if we can read /etc/shadowSimon McVittie2022-05-111-1/+2
| | |/ / | |/| |
* | | | meson: Add options to set a RPATH/RUNPATH on the bwrap executableSimon McVittie2022-05-165-0/+40
|/ / /
* | | Release v0.6.2v0.6.2Simon McVittie2022-05-112-2/+2
* | | Merge pull request #486 from smcv/unusedSimon McVittie2022-05-112-5/+5
|\ \ \
| * | | utils: Silence -Wunused-parameter with clang, Meson, and SELinux disabledSimon McVittie2022-04-051-4/+4