treewide: replace local mkdir_p implementations
[project/procd.git] / jail / jail.c
2020-12-12 Daniel Golletreewide: replace local mkdir_p implementations
2020-12-09 Daniel Gollejail: remove unreachable code
2020-12-01 Daniel Gollejail: improve seccomp log output
2020-11-30 Daniel Gollejail: always call cgroups_free()
2020-11-27 Daniel Gollejail: properly initialize timens_fd
2020-11-27 Daniel Gollejail: enter existing cgroups namespace if given
2020-11-27 Daniel Gollejail: don't attempt to mount /sys with noatime
2020-11-27 Daniel Gollejail: fix typo in usage output
2020-11-27 Daniel Gollejail: seteuid before clone(CLONE_NEWUSER)
2020-11-27 Daniel Gollejail: don't fail if can't mount-bind /etc/resolv.conf
2020-11-27 Daniel Gollejail: don't use NULL arguments for mount syscall
2020-11-27 Daniel Gollejail: relax /etc/resolv.conf creation
2020-11-27 Daniel Gollejail: fix and simplify userns uid/gid maps from OCI
2020-11-27 Daniel Gollejail: fix segfault on missing name and refactor
2020-11-27 Daniel Gollejail: leak less memory
2020-11-07 Daniel Gollejail: fix capabilities
2020-10-28 Daniel Gollejail: don't fail if maskedPath cannot be found
2020-10-28 Daniel Gollejail: add support for absolute root path in OCI spec
2020-10-28 Daniel Gollejail: handle mount propagation flags
2020-10-28 Daniel Gollejail: add option for pidfile
2020-10-28 Daniel Gollejail: guard boolean blobmsg attributes
2020-10-22 Daniel Gollejail: mount more stuff read-only
2020-10-21 Daniel Gollejail: capabilities: apply in two phases
2020-10-19 Daniel Gollejail: nuke old capabilities code in favour of reusing...
2020-10-19 Daniel Gollejail: adapt to new ubus socket path
2020-08-06 Daniel Gollejail: fix freeing cgroups avl
2020-08-06 Daniel Gollejail: only free cgroups if they were allocated
2020-08-06 Daniel Gollejail: parse OCI cgroups resources
2020-08-06 Daniel Gollejail: make use of BLOBMSG_CAST_INT64 for OCI rlimits
2020-08-06 Daniel Gollejail: use pidns semantics also for timens
2020-07-29 Daniel Gollejail: add 'kill' method to container.%s object
2020-07-28 Daniel Gollejail: add some remaining OCI features
2020-07-25 Daniel Gollejail: serialize hook execution
2020-07-25 Daniel Gollejail: fix build on glibc and uclibc
2020-07-21 Daniel Gollejail: add support for referencing existing namespaces
2020-07-20 Rosen Penevjail: fix wrong format for 32-bit
2020-07-20 Daniel Gollejail: re-implement /proc/sys/net read-write in netns...
2020-07-20 Daniel Gollejail: refactor default mounts into new structure
2020-07-20 Daniel Gollejail: add support for defining devices
2020-07-20 Daniel Gollejail: move /tmp/resolv.conf.d to /dev/resolv.conf.d
2020-07-19 Daniel Gollejail: /proc/$pid/oom_score_adj to OCI defined oomScoreAdj
2020-07-19 Daniel Gollejail: parse and apply POSIX rlimits
2020-07-19 Daniel Gollejail: read and apply umask from OCI if defined
2020-07-19 Daniel Gollejail: implement OCI user additionalGIDs
2020-07-19 Daniel Gollejail: parse and apply OCI sysctl values
2020-07-19 Daniel Gollejail: fix hooks
2020-07-17 Daniel Gollejail: add support for maskedPaths and readonlyPaths
2020-07-13 Daniel Gollejail: don't make mount source read-only
2020-07-13 Daniel Gollejail: refactor mount support to cover OCI spec
2020-07-13 Daniel Gollejail: memory allocation fixes
2020-07-13 Daniel Gollejail: parse and run OCI hooks
2020-07-13 Daniel Gollejail: actually chdir into OCI defined CWD
2020-07-13 Daniel Gollejail: consider PATH for argv in OCI container
2020-07-13 Daniel Gollejail: fix segfault with len(uidmap/gidmap) > 1
2020-07-11 Rosen Penevprocd: fix compilation with uClibc-ng
2020-07-10 Daniel Gollejail: add support for running OCI bundle
2020-05-28 Daniel Gollejail: handle containers seperately
2020-05-15 Daniel Gollejail: add option to provide /dev/console to containers
2020-05-15 Leonardo Mörleinjail: unnamed jails can not have netns (fix segfault)
2020-05-15 Leonardo Mörleinjail: SIGSEGV must not be forwarded to the child process
2020-04-25 Daniel Gollejail: don't load libpreload-seccomp.so if it doesn...
2020-04-25 Daniel Gollejail: don't fail unless requirejail is set
2020-04-19 Daniel Gollejail: include /etc/nsswitch.conf in jail for glibc.
2020-04-14 Daniel Gollejail: always mount /dev as additional tmpfs
2020-04-13 Daniel Gollejail: replace /etc/resolv.conf with symlink in extroot...
2020-04-13 Daniel Gollejail: mount /sys read-only
2020-04-13 Daniel Gollejail: make /proc more secure
2020-04-12 Daniel Gollejail: only mess with rootfs if CLONE_NEWNS was set
2020-04-09 Daniel Gollejail: add support for (ram-)overlayfs
2020-04-09 Daniel Gollejail: add support for userns and cgroupsns
2020-04-09 Daniel Gollejail: add support for launching extroot containers
2020-03-12 Daniel Gollejail: mount-bind /etc/resolv.conf for non-netns jails
2020-01-21 Daniel Gollejail: more strict mount options for /tmp/resolv.conf.d/
2020-01-21 Daniel Gollejail: create resolv.conf symlink for netns jails
2020-01-21 Daniel Gollejail: add basic support for network namespaces
2019-12-30 Daniel Gollejail: remove accidentally added lines
2019-12-30 Daniel Gollejail: set user and group inside jail
2018-01-02 Rosen Penevprocd: Replace strerror(errno) with %m.
2017-02-08 John Crispinujail: fix signal forwarding
2017-01-10 Etienne CHAMPETIERujail: add basic /dev files
2016-12-02 Felix Fietkauujail: send SIGKILL to jail process if SIGTERM fails
2016-06-03 Etienne CHAMPETIERjail: don't always CLONE_NEWUTS
2016-06-01 Etienne CHAMPETIERjail: ensure mounts are not MS_SHARED to avoid pivot_ro...
2016-06-01 Etienne CHAMPETIERjail: improve some logs
2016-06-01 Etienne CHAMPETIERjail: don't include capabilities config (-C) inside...
2016-06-01 Etienne CHAMPETIERjail: call build_envp() just before execve()
2016-06-01 Etienne CHAMPETIERjail: regroup add_path_and_deps() calls
2016-06-01 Etienne CHAMPETIERjail: call chdir(/) after pivot_root()
2015-12-11 Etienne CHAMPETIERujail: split name (-n) and hostname (-h) options
2015-12-11 Etienne CHAMPETIERujail: add no_new_privs (-c) option
2015-12-11 Etienne CHAMPETIERinstance, ujail: remove "-P <path>" option
2015-12-11 Etienne CHAMPETIERujail: fixup code style // -> /* */
2015-11-27 Etienne CHAMPETIERujail: rework fs jail part
2015-11-27 Etienne CHAMPETIERujail: remove some debug/dev hack
2015-11-27 Etienne CHAMPETIERujail: fixup code style: "func()" -> "func(void)"
2015-11-27 Etienne CHAMPETIERujail: add init_library_search()
2015-11-27 Etienne CHAMPETIERujail: use PATH_MAX for path related buffers
2015-11-27 Etienne CHAMPETIERujail: search libs in /lib before /lib64
2015-11-27 Etienne CHAMPETIERujail: remove "#include log.h" from elf.h
2015-11-27 Etienne CHAMPETIERujail: add <stdio.h> to log.h
next