summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2021-02-07procd: add hotplug-call dispatcherDaniel Golle
2021-02-02jail: cgroups: fix uninitialized variableDaniel Golle
2021-02-02jail: only output BPF instr. table header if debuggingDaniel Golle
2021-02-02jail: remove duplicate check for hook file permissionsDaniel Golle
2021-01-26procd: fix compiler warningJohn Crispin
2021-01-26hotplug.c: set nl_pid to zeroStefan Eichenberger
2020-12-12treewide: replace local mkdir_p implementationsDaniel Golle
2020-12-09jail: remove unreachable codeDaniel Golle
2020-12-04early: fall-back to run ubus as root if user can't be foundDaniel Golle
2020-12-01jail: improve seccomp log outputDaniel Golle
2020-11-30jail: seccomp: improve code readabilityDaniel Golle
2020-11-30jail: always call cgroups_free()Daniel Golle
2020-11-30jail: improve seccomp BPF generatorDaniel Golle
2020-11-27jail: properly initialize timens_fdDaniel Golle
2020-11-27jail: enter existing cgroups namespace if givenDaniel Golle
2020-11-27jail: don't attempt to mount /sys with noatimeDaniel Golle
2020-11-27jail: fix typo in usage outputDaniel Golle
2020-11-27jail: seteuid before clone(CLONE_NEWUSER)Daniel Golle
2020-11-27jail: don't fail if can't mount-bind /etc/resolv.confDaniel Golle
2020-11-27jail: don't use NULL arguments for mount syscallDaniel Golle
2020-11-27jail: relax /etc/resolv.conf creationDaniel Golle
2020-11-27jail: fix and simplify userns uid/gid maps from OCIDaniel Golle
2020-11-27jail: fix segfault on missing name and refactorDaniel Golle
2020-11-27jail: leak less memoryDaniel Golle
2020-11-22jail: add 'debug' extern variable to preload_seccompDaniel Golle
2020-11-22uxc: also delete procd runtime state on 'delete'Daniel Golle
2020-11-22uxc: fix incomplete commitDaniel Golle
2020-11-21jail: cgroup hack: rewrite cgroup -> cgroup2Daniel Golle
2020-11-21seccomp: silence 'unknown syscall' warningsDaniel Golle
2020-11-21uxc: make force-delete kill container processDaniel Golle
2020-11-17trace: switch to OCI seccomp JSON outputDaniel Golle
2020-11-15seccomp: switch to new OCI compliant parserDaniel Golle
2020-11-15seccomp: specifying architectures is optionalDaniel Golle
2020-11-07jail: fix capabilitiesDaniel Golle
2020-10-28uxc: mimic runc cmdline by using getopt_longDaniel Golle
2020-10-28jail: don't fail if maskedPath cannot be foundDaniel Golle
2020-10-28jail: add support for absolute root path in OCI specDaniel Golle
2020-10-28jail: relax seccomp unknown syscall handlingDaniel Golle
2020-10-28jail: handle mount propagation flagsDaniel Golle
2020-10-28jail: add option for pidfileDaniel Golle
2020-10-28jail: guard boolean blobmsg attributesDaniel Golle
2020-10-23ujail: elf: work around GCC bug on MIPS64Daniel Golle
2020-10-22jail: mount more stuff read-onlyDaniel Golle
2020-10-21jail: capabilities: apply in two phasesDaniel Golle
2020-10-19jail: nuke old capabilities code in favour of reusing OCI codeDaniel Golle
2020-10-19instance: actually wire up capabilities filenameDaniel Golle
2020-10-19jail: adapt to new ubus socket pathDaniel Golle
2020-10-19early: run ubusd non-root as user ubus, group ubusDaniel Golle
2020-08-13cgroups: memory controller fixesDaniel Golle
2020-08-13cgroups: restrict allowed keys in 'unified' sectionDaniel Golle