summaryrefslogtreecommitdiff
path: root/bubblewrap.c
Commit message (Expand)AuthorAgeFilesLines
* retcode: fix return code with syncfd and no event_fdhomu-tmpJean-Baptiste BESNARD2020-01-281-8/+11
* --userns --uid: Only swtich user if neededreuse-namespacesAlexander Larsson2019-11-271-2/+2
* Allow --uid and --gid with --usernsAlexander Larsson2019-11-271-6/+16
* Drop cap bounding set also in --userns caseAlexander Larsson2019-11-271-1/+1
* Fix typo in commentAlexander Larsson2019-11-261-1/+1
* Add support for --pidnsAlexander Larsson2019-11-261-2/+62
* Add support for --userns and --userns2Alexander Larsson2019-11-221-3/+76
* Mark init process as dumpable so we can see stuff in its /procAlexander Larsson2019-11-211-0/+4
* setuid mode: Properly drop privs in monitor and pid1Alexander Larsson2019-11-211-1/+1
* Add work-around for TEMP_FAILURE_RETRY to support muslshawrkbait2019-10-111-0/+9
* bwrap: include the pid namespace id in status/jsonChristian Kellner2019-09-181-3/+91
* bwrap: set opt_unshare_cgroup when _try succeedsChristian Kellner2019-09-181-2/+5
* Don't create our own temporary mount point for pivot_rootSimon McVittie2019-03-061-11/+9
* Fix typosJakub Wilk2019-02-261-5/+5
* bwrap: Report COMMAND exit code in json-status-fdRichard Maw2018-11-051-6/+68
* bwrap: add option json-status-fd to show child exit codeRichard Maw2018-11-051-4/+46
* Add --bind-try optionsPatrick Griffis2018-08-091-8/+30
* Use "tmpfs" instead of empty string for mountColin Walters2018-07-171-1/+1
* Fix leak detected by LSan/ASanOlivier Blin2018-06-141-5/+8
* bwrap, pivot_root: do not require write access to the rootfsGiuseppe Scrivano2018-04-301-21/+21
* bwrap: do not always make /proc/{sys,sysrq-trigger,irq} roGiuseppe Scrivano2018-04-301-3/+9
* Use pivot_root() instead of chroot() for final rootColin Walters2018-04-301-8/+34
* Add "--" pseudo-argument to end option parsingSimon McVittie2018-04-231-1/+7
* Don't rely on mkdir returning EEXISTS (fixing NFS)Alexander Larsson2018-03-161-8/+8
* Remove O_RDONLY flag when O_PATH is usedMarcos Paulo de Souza2017-10-301-2/+2
* bubblewrap: Do not leak FDs dedicated to setup_newrootMickaël Salaün2017-10-301-0/+20
* Skip prctl(PR_CAP_AMBIENT) if PR_CAP_AMBIENT isn't definedSimon McVittie2017-10-271-0/+6
* bwrap: Second attempt at fixing an argv handling leakPhilip Withnall2017-10-101-6/+14
* Avoid leaking --args-fd to child processColin Walters2017-10-061-0/+1
* Partially revert "bubblewrap: Fix a minor memory leak in --args handling"Simon McVittie2017-10-061-1/+1
* acquire_privs: Cosmetic change to reduce indentationMarcos Paulo de Souza2017-09-301-3/+2
* bubblewrap.c: Fix typo secomp -> seccomp in drop_all_capsMarcos Paulo de Souza2017-09-261-1/+1
* bubblewrap: Remove not needed MS_MGC_VAL mount flagMarcos Paulo de Souza2017-09-261-3/+3
* With --dev, add /dev/fd and /dev/core symlinksColin Walters2017-09-181-0/+10
* bubblewrap: check for max_user_namespaces == 0Tristan Cacqueray2017-09-181-0/+9
* main: Fix typo, tweak command line argument descriptionsColin Walters2017-08-241-6/+6
* bubblewrap: Add various assertions on SetupOp handlingPhilip Withnall2017-08-151-0/+4
* bubblewrap: Close FDs on exiting PID 1Philip Withnall2017-08-151-0/+12
* bubblewrap: Fix a minor memory leak in --args handlingPhilip Withnall2017-08-151-4/+4
* bubblewrap: Improve const-correctness of argv handlingPhilip Withnall2017-08-151-12/+12
* Retain all caps when invoked by uid 0, work around systemd seccomp filterColin Walters2017-08-141-2/+46
* bubblewrap: do not always leave caps in the unprivileged caseGiuseppe Scrivano2017-06-291-10/+19
* bubblewrap.c: fix typoGiuseppe Scrivano2017-06-291-1/+1
* bubblewrap: add option --userns-block-fdGiuseppe Scrivano2017-06-291-9/+42
* bubblewrap: add --cap-add and --cap-dropGiuseppe Scrivano2017-06-291-9/+119
* bubblewrap: add --as-pid-1Giuseppe Scrivano2017-06-131-4/+21
* main: Squash a -Wunused-result error, enable FORTIFY_SOURCE in CIColin Walters2017-03-291-1/+1
* main: Parse --version early before acquiring capabilitiesColin Walters2017-03-281-2/+16
* Add --die-with-parentMarek Jarycki2017-02-271-0/+27
* Ignore missing sysrq-trigger fileTristan Cacqueray2017-02-201-0/+3