summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
...
* main: Fix typo, tweak command line argument descriptionsColin Walters2017-08-241-6/+6
* bubblewrap: Add various assertions on SetupOp handlingPhilip Withnall2017-08-151-0/+4
* bubblewrap: Close FDs on exiting PID 1Philip Withnall2017-08-151-0/+12
* bubblewrap: Fix a minor memory leak in --args handlingPhilip Withnall2017-08-151-4/+4
* bubblewrap: Improve const-correctness of argv handlingPhilip Withnall2017-08-151-12/+12
* Retain all caps when invoked by uid 0, work around systemd seccomp filterColin Walters2017-08-143-9/+79
* README.md: Delete cat logo picture (not DFSG compliant)Colin Walters2017-08-142-4/+0
* tests: Import libtest-core.sh from ostreeColin Walters2017-08-022-14/+145
* ci: rename files to new name and bump to f26Jonathan Lebon2017-08-022-7/+8
* README.md: add bwrap-oci to the list of usersGiuseppe Scrivano2017-07-121-0/+1
* tests: add tests for --cap-addGiuseppe Scrivano2017-06-291-1/+15
* bubblewrap: do not always leave caps in the unprivileged caseGiuseppe Scrivano2017-06-291-10/+19
* bubblewrap.c: fix typoGiuseppe Scrivano2017-06-291-1/+1
* demos: add demo userns-block-fd.pyGiuseppe Scrivano2017-06-291-0/+36
* bubblewrap: add option --userns-block-fdGiuseppe Scrivano2017-06-293-9/+51
* bubblewrap: add --cap-add and --cap-dropGiuseppe Scrivano2017-06-294-9/+146
* Merge pull request #196 from giuseppe/no-reaperAlexander Larsson2017-06-134-4/+32
|\
| * bubblewrap: add --as-pid-1Giuseppe Scrivano2017-06-134-4/+32
|/
* main: Squash a -Wunused-result error, enable FORTIFY_SOURCE in CIColin Walters2017-03-292-3/+3
* demos/shell: Use --die-with-parentColin Walters2017-03-291-0/+1
* Release 0.1.8v0.1.8Colin Walters2017-03-281-1/+1
* main: Parse --version early before acquiring capabilitiesColin Walters2017-03-281-2/+16
* test-run.sh: fix the path for the usage stringGiuseppe Scrivano2017-03-011-1/+1
* Add --die-with-parentMarek Jarycki2017-02-274-0/+82
* Ignore missing sysrq-trigger fileTristan Cacqueray2017-02-201-0/+3
* README: update references to runCAleksa Sarai2017-02-171-9/+12
* Correctly validate remount-ro argumentAidan Hobson Sayers2017-02-081-0/+3
* Remove privileged_op flags that are never usedAidan Hobson Sayers2017-02-081-3/+2
* Ignore EPERM when dropping caps from bounding setMario Sanchez Prada2017-02-071-1/+8
* ci: Disable ASAN leak checkingColin Walters2017-01-271-1/+1
* tests: Fold test-basic.sh into test-run.shColin Walters2017-01-263-37/+8
* Be more informative if loopback setup failsColin Walters2017-01-263-11/+9
* ci: Revamp to actually run the testsColin Walters2017-01-232-54/+57
* tests: Use --unshare-user-tryColin Walters2017-01-231-1/+1
* Added --unshare-all to manpagevaloq2017-01-211-0/+4
* Add --require-userns build option for setuid modevaloq2017-01-202-0/+17
* build: Remove unbalanced ) in help messageColin Walters2017-01-201-1/+1
* Bump version to 0.1.7v0.1.7Alexander Larsson2017-01-181-1/+1
* Add --unshare-all and --share-netColin Walters2017-01-172-9/+27
* Install seccomp filter at the very endAlexander Larsson2017-01-171-11/+15
* Call setsid() and setexeccon() befor forking the init monitorAlexander Larsson2017-01-171-7/+7
* demos/bubblewrap-shell.sh: Unshare all namespacesAlexander Larsson2017-01-171-0/+5
* Make the call to setsid() optional, with --new-sessionAlexander Larsson2017-01-172-1/+20
* ci: Combine ASAN and UBSANColin Walters2017-01-171-2/+3
* Clear capability bounding setAlexander Larsson2017-01-131-0/+20
* Handle inherited children dyingAlexander Larsson2017-01-131-11/+41
* Release 0.1.6Colin Walters2017-01-111-1/+1
* demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docsColin Walters2017-01-111-1/+9
* man: Correct namespace user -> mountColin Walters2017-01-101-3/+4
* Call setsid() before executing sandboxed code (CVE-2017-5226)Simon McVittie2017-01-091-0/+3