summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Bump version to 0.1.7v0.1.7Alexander Larsson2017-01-181-1/+1
* Add --unshare-all and --share-netColin Walters2017-01-172-9/+27
* Install seccomp filter at the very endAlexander Larsson2017-01-171-11/+15
* Call setsid() and setexeccon() befor forking the init monitorAlexander Larsson2017-01-171-7/+7
* demos/bubblewrap-shell.sh: Unshare all namespacesAlexander Larsson2017-01-171-0/+5
* Make the call to setsid() optional, with --new-sessionAlexander Larsson2017-01-172-1/+20
* ci: Combine ASAN and UBSANColin Walters2017-01-171-2/+3
* Clear capability bounding setAlexander Larsson2017-01-131-0/+20
* Handle inherited children dyingAlexander Larsson2017-01-131-11/+41
* Release 0.1.6Colin Walters2017-01-111-1/+1
* demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docsColin Walters2017-01-111-1/+9
* man: Correct namespace user -> mountColin Walters2017-01-101-3/+4
* Call setsid() before executing sandboxed code (CVE-2017-5226)Simon McVittie2017-01-091-0/+3
* Bump version to 0.1.5v0.1.5Alexander Larsson2016-12-191-1/+1
* bind-mount: Check for errors in realpath()Alexander Larsson2016-12-131-0/+2
* build: Sync default warning -> error set from ostreeColin Walters2016-12-122-5/+311
* utils: Add __attribute__((printf)) to die()Colin Walters2016-12-121-1/+1
* README.md: Update with better one liner and more informationColin Walters2016-12-121-28/+9
* ci: Modernize a bit, add f25-ubsanColin Walters2016-12-071-12/+54
* Only --unshare-user automatically if we're not rootColin Walters2016-12-051-2/+3
* Don't call capset() unless we need toColin Walters2016-12-011-3/+4
* Fix incorrect nesting of backticks when finding a FUSE mountSimon McVittie2016-11-291-1/+1
* Adapt tests so they can be run against installed binariesSimon McVittie2016-11-293-10/+10
* test-run: don't assume we are uid 1000Simon McVittie2016-11-291-1/+1
* test-run: be a bash scriptSimon McVittie2016-11-291-1/+1
* Release 0.1.4v0.1.4Alexander Larsson2016-11-291-1/+1
* Fix make distAlexander Larsson2016-11-291-0/+8
* bind-mount: Fix issue when destination of mount is in a symlinkAlexander Larsson2016-11-222-3/+11
* tests/test-run.sh: Add some more tests that now workAlexander Larsson2016-11-151-2/+1
* bind-mounts: Fix handling of covered mountpointsAlexander Larsson2016-11-151-117/+262
* utils: Add path_equal()Alexander Larsson2016-11-152-0/+35
* bubblewrap: do not leave zombie processGiuseppe Scrivano2016-11-101-0/+2
* bwrap: fix typosGiuseppe Scrivano2016-11-101-2/+2
* bwrap: setuid to the sandbox uidGiuseppe Scrivano2016-11-101-2/+2
* Work around user-namespaces allowing ptraceAlexander Larsson2016-11-091-112/+270
* Completely drop setcaps codepaths in favour of setuidAlexander Larsson2016-11-094-15/+4
* Add test with basic running operationsAlexander Larsson2016-11-093-2/+91
* build: Dist bwrap.xml in tarballColin Walters2016-11-092-0/+2
* Priv-sep: Don't trust client args for REMOUNT_RO_NO_RECURSIVEAlexander Larsson2016-11-071-2/+2
* Don't print double errors in case privileged helper diesAlexander Larsson2016-11-071-0/+3
* .redhat-ci.yml: New fileColin Walters2016-10-251-0/+26
* Release 0.1.3v0.1.3Colin Walters2016-10-141-1/+1
* Only set DUMPABLE when we need it (i.e. in user namespace child)Alexander Larsson2016-10-141-4/+42
* Make notes on sandstorm.io somewhat more accurateKenton Varda2016-10-131-4/+8
* Don't allow setting hostname if not unsharing UTS namespaceAlexander Larsson2016-10-131-0/+4
* Move commandline args to top of the fileAlexander Larsson2016-10-131-19/+18
* Fix capability list in spec file.Bill Nottingham2016-09-241-1/+1
* Release 0.1.20.1.2Alexander Larsson2016-09-091-1/+1
* Remove the temp file created by --[ro-]-bind-dataAlexander Larsson2016-09-071-0/+5
* Add --ro-bind-data, which is the same as --bind-data but readonlyAlexander Larsson2016-09-072-1/+28
View Lorry Controller Status