default
|
e2fccec1d9
New compilation variable WITHOUT_SANDBOX, to disable all sandboxing.
|
hai 1 ano |
default
|
5af94dade6
Minor sandbox fix for Debian stable.
|
hai 1 ano |
shtrophic
|
bbce5e32ca
use correct macros for compatibility
|
hai 1 ano |
shtrophic
|
629a7953f9
use compat macros to compile on kernels without LANDLOCK_ACCESS_NET_*
|
hai 1 ano |
shtrophic
|
f625b7f729
don't try to make files directory-readable
|
hai 1 ano |
shtrophic
|
fb8145297c
make log output specific to landlock status
|
hai 1 ano |
shtrophic
|
7d07d3bffd
cleanup rules
|
hai 1 ano |
shtrophic
|
e52b4bf39b
import landloc.h
|
hai 1 ano |
shtrophic
|
80ff16b21c
make sendmail executable if configured
|
hai 1 ano |
shtrophic
|
972783fcb2
only rwc /dev/shm when WITHOUT_SHM is undefined
|
hai 1 ano |
shtrophic
|
017140f523
remove unused headers
|
hai 1 ano |
shtrophic
|
559f23c808
add distinction between RWC with directories and without, include FS_REFER permission
|
hai 1 ano |
shtrophic
|
75f6159056
sandboxing port to linux via landlock
|
hai 1 ano |