summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2020-07-28jail: add some remaining OCI featuresDaniel Golle
2020-07-25jail: serialize hook executionDaniel Golle
2020-07-25jail: fix build on glibc and uclibcDaniel Golle
2020-07-21jail: add support for referencing existing namespacesDaniel Golle
2020-07-20jail: fix wrong format for 32-bitRosen Penev
2020-07-20rcS: cast format string to int64_tRosen Penev
2020-07-20jail: re-implement /proc/sys/net read-write in netns hackDaniel Golle
2020-07-20jail: refactor default mounts into new structureDaniel Golle
2020-07-20jail: actually apply filesystem-specific mount optionsDaniel Golle
2020-07-20jail: add support for defining devicesDaniel Golle
2020-07-20jail: move /tmp/resolv.conf.d to /dev/resolv.conf.dDaniel Golle
2020-07-19jail: /proc/$pid/oom_score_adj to OCI defined oomScoreAdjDaniel Golle
2020-07-19jail: parse and apply POSIX rlimitsDaniel Golle
2020-07-19jail: read and apply umask from OCI if definedDaniel Golle
2020-07-19jail: implement OCI user additionalGIDsDaniel Golle
2020-07-19jail: parse and apply OCI sysctl valuesDaniel Golle
2020-07-19jail: fix hooksDaniel Golle
2020-07-17jail: add support for maskedPaths and readonlyPathsDaniel Golle
2020-07-16jail: fix some more mount optionsDaniel Golle
2020-07-15jail: fs: fix build on uClibc-ngDaniel Golle
2020-07-15procd: fix compile if procd-ujail is not selectedDaniel Golle
2020-07-13jail: fix false return in case of nofail mountDaniel Golle
2020-07-13procd: add service instance watchdogDaniel Bailey
2020-07-13uxc: fix build with uClibc-ngDaniel Golle
2020-07-13uxc: fix 'stop' commandDaniel Golle
2020-07-13jail: don't make mount source read-onlyDaniel Golle
2020-07-13jail: refactor mount support to cover OCI specDaniel Golle
2020-07-13jail: memory allocation fixesDaniel Golle
2020-07-13jail: parse and run OCI hooksDaniel Golle
2020-07-13jail: actually chdir into OCI defined CWDDaniel Golle
2020-07-13jail: consider PATH for argv in OCI containerDaniel Golle
2020-07-13jail: fix segfault with len(uidmap/gidmap) > 1Daniel Golle
2020-07-11procd: fix compilation with uClibc-ngRosen Penev
2020-07-11jail: use linux/capability.h instead of sys/capability.hDaniel Golle
2020-07-11ujail: add dependency on syscall-names-hDaniel Golle
2020-07-10jail: fix build on platforms without seccomp supportDaniel Golle
2020-07-10uxc: add container management CLI toolDaniel Golle
2020-07-10jail: add support for running OCI bundleDaniel Golle
2020-05-28jail: handle containers seperatelyDaniel Golle
2020-05-28jail: use sane termios settings for console ptsDaniel Golle
2020-05-15jail: add option to provide /dev/console to containersDaniel Golle
2020-05-15jail: unnamed jails can not have netns (fix segfault)Leonardo Mörlein
2020-05-15jail: SIGSEGV must not be forwarded to the child processLeonardo Mörlein
2020-04-25jail: don't load libpreload-seccomp.so if it doesn't existDaniel Golle
2020-04-25jail: don't fail unless requirejail is setDaniel Golle
2020-04-19jail: include /etc/nsswitch.conf in jail for glibc.Daniel Golle
2020-04-14jail: always mount /dev as additional tmpfsDaniel Golle
2020-04-13jail: replace /etc/resolv.conf with symlink in extroot+overlayDaniel Golle
2020-04-13jail: mount /sys read-onlyDaniel Golle
2020-04-13jail: make /proc more secureDaniel Golle