1. 258b913 minijail: Update common.mk with symbolic and visibility flags by Tatsuyuki Ishi · 3 weeks ago firmware-R128-15963.B firmware-ti50-prepvt-15974.B main release-R128-15964.B stabilize-15964.9.B
  2. 76b25b8 build.rs: Add env vars to control build process by Dennis Kempin · 4 weeks ago firmware-android-15949.B
  3. c3c4c29 config_parser: drop error checking by Mike Frysinger · 4 weeks ago
  4. 2737548 parse_size: rewrite to simplify & handle more edge cases by Mike Frysinger · 5 weeks ago
  5. 4501821 util: add nonnull annotations to helper functions by Mike Frysinger · 5 weeks ago
  6. 66f087d cli: drop unnecessary --seccomp-bpf-binary optarg NULL check by Mike Frysinger · 5 weeks ago
  7. a901686 cli: use bool in more places by Mike Frysinger · 5 weeks ago
  8. 8d4dc0d cli: localize --preserve-fd temp variables by Mike Frysinger · 5 weeks ago
  9. 655c034 Add common /etc paths to --fs-default-paths by Ben Scarlato · 9 weeks ago firmware-R127-15916.B release-R127-15917.B stabilize-15926.B
  10. 793a7cc tools: seccomp_policy_lint_unittest: fix baselines by Mike Frysinger · 9 weeks ago
  11. 99e8fd4 minijail-sys: Do not rely on libcap in build script by Sargun Dhillon · 2 months ago stabilize-15905.B linux-v2024.05.22
  12. c1df6ba Set embedded_launcher: true for minijail tests by Cole Faust · 4 months ago firmware-R126-15885.B firmware-geralt-15842.B firmware-hps-15892.B release-R125-15853.B release-R126-15886.B stabilize-15855.B stabilize-15857.B stabilize-15886.46.B stabilize-15886.63.B stabilize-15886.66.B stabilize-15888.B stabilize-hps-15890.B stabilize-quickfix-15886.43.B
  13. 156ff64 Update link to Sandboxing system services doc by Ben Scarlato · 4 months ago factory-geralt-15840.B
  14. 5555403 minijail0(1): Correct --seccomp-bpf-binary section formatting by Brian Norris · 5 months ago release-R124-15823.B stabilize-15823.40.B stabilize-15828.B stabilize-quickfix-15823.44.B
  15. 3755164 rust: add init_default_logging and enable it for tests by Allen Webb · 6 months ago release-R123-15786.B stabilize-15786.48.B stabilize-15786.58.B stabilize-15793.B stabilize-quickfix-15786.49.B
  16. 8ee76d5 enable python linting by Mike Frysinger · 6 months ago
  17. f206fb7 PRESUBMIT: enable cros lint on some files by Mike Frysinger · 6 months ago
  18. 80e6f8a test: fix shellcheck lint errors by Mike Frysinger · 6 months ago
  19. 7ae4822 tools: drop obsolete __future__ imports by Mike Frysinger · 6 months ago
  20. c7a3649 setup.py: update version & python version requirement by Mike Frysinger · 6 months ago
  21. b820827 setup.py: update license tags to reflect CrOS BSD usage by Mike Frysinger · 6 months ago
  22. a8706d3 get_googletest.sh: fix shebang by Mike Frysinger · 6 months ago
  23. e388978 format a few random files by Mike Frysinger · 6 months ago
  24. 4cc8245 common.mk: sync with latest platform2 by Mike Frysinger · 6 months ago
  25. cfff586 gen_{constants,syscalls}.sh: fix shellcheck lint errors by Mike Frysinger · 6 months ago
  26. 4642def signal_handle: tweak si_syscall handling by Mike Frysinger · 6 months ago
  27. f14fc32 generate_seccomp_policy: switch generated license header to CrOS BSD by Mike Frysinger · 6 months ago
  28. 9e8e421 README: add GitHub pages details by Mike Frysinger · 6 months ago
  29. 9c4a083 dev-rust/minijail: ignore failing unit test by Jim Pollock · 6 months ago
  30. 1e1e0c9 minijail: Add function minijail_namespace_net_loopback() by François Degros · 7 months ago stabilize-15756.B
  31. 06a0c3e seccomp_policy_lint: consider non-permissive rules safe by Allen Webb · 7 months ago
  32. 38eb133 Add CLI option for --preserve-fd by Ben Scarlato · 7 months ago release-R122-15753.B stabilize-15753.46.B stabilize-15753.55.B
  33. ba0b1c1 cleanup: replace username in TODO with bug number by Ben Scarlato · 8 months ago
  34. 44d8edd Add ability to disable calling setsid() by Ben Scarlato · 8 months ago
  35. 739400a gtest: update to 1.14.0 by Mike Frysinger · 8 months ago factory-rex-15708.B firmware-rex-15709.B stabilize-15714.B
  36. 0097a51 OWNERS: avoid surfacing inactive owners by Mike Frysinger · 8 months ago
  37. c2f2f5b system: add a max valid cap check by Mike Frysinger · 8 months ago release-R121-15699.B stabilize-15699.58.B stabilize-15699.66.B
  38. b7faa0a libminijail: Handle large file descriptors by Allen Webb · 9 months ago factory-brya-15684.B stabilize-15677.B
  39. e5600d0 Run `cros format` on .c, .h, and .cc files by Allen Webb · 9 months ago
  40. 2b3a9ca libminijail-private: Include sys/types.h for size_t by Allen Webb · 9 months ago
  41. 1efac88 tools: seccomp_policy_lint: handle stdin checking better by Mike Frysinger · 10 months ago stabilize-15642.B stabilize-15654.B
  42. c3a4247 constants: include linux/random.h for GRND_RANDOM by Mike Frysinger · 10 months ago stabilize-15633.44.B
  43. b6c2d68 seccomp_policy_lint: mark getrandom as dangerous by default by Mike Frysinger · 10 months ago
  44. 65c4064 seccomp_policy_lint: support syscalls with known safe rules by Mike Frysinger · 10 months ago
  45. b1b7a5d python: reformat with `cros format` (black) by Mike Frysinger · 10 months ago
  46. 0d443e7 python: harmonize shebang & +x bits by Mike Frysinger · 10 months ago
  47. a829072 python: switch license to CrOS by Mike Frysinger · 10 months ago
  48. 6199d5d python: delete python 2 encoding cookie by Mike Frysinger · 10 months ago
  49. 999a1c1 Don't log Landlock errors for kernel support by Ben Scarlato · 11 months ago
  50. 68aa12f gtest: disable legacy case APIs by Mike Frysinger · 12 months ago firmware-cr50-efi-15611.28.B firmware-cr50-mp-15611.B firmware-cr50-prepvt-15608.B release-R118-15604.B stabilize-15588.B stabilize-15604.16.B stabilize-15604.45.B stabilize-15604.56.B stabilize-15604.57.B stabilize-15610.B
  51. 907bbc8 build with C17 & C++20 by Mike Frysinger · 12 months ago
  52. 2f6094f Reduce log messages when running minijail0. by Ben Scarlato · 1 year ago release-R117-15572.B stabilize-15572.16.B stabilize-15572.39.B stabilize-15572.4.B stabilize-15572.50.B stabilize-15572.57.B stabilize-15572.63.B
  53. 48beabc tests: skip testing if code coverage is enabled by George Burgess IV · 1 year ago
  54. fece65a minijail: update to _FORTIFY_SOURCE=3 by George Burgess IV · 1 year ago stabilize-15564.B
  55. d4b6962 Fix Python deprecation warnings by Luca Farsi · 1 year, 1 month ago stabilize-15561.B stabilize-15562.B stabilize-15563.B
  56. 0211a3e Free |filter_path| before assignment. by Jorge Lucangeli Obes · 1 year, 1 month ago
  57. b75bf11 Check correct pointer for NULL. by Jorge Lucangeli Obes · 1 year, 1 month ago
  58. 0fa82d4 Free |filter| variable when exiting early. by Jorge Lucangeli Obes · 1 year, 1 month ago
  59. e330561 Ensure |filter_path| gets freed. by Jorge Lucangeli Obes · 1 year, 1 month ago
  60. efff2b7 gtest: update to 1.13.0 by Mike Frysinger · 1 year, 4 months ago stabilize-15511.B stabilize-15519.B stabilize-15531.B stabilize-15532.B
  61. 6cc77cd minijail-sys: Run minijail's `make` with jobs=4 by Keiichi Watanabe · 1 year, 3 months ago
  62. 89ac850 libminijail_unittest: Compare strings, not pointers by Christian Blichmann · 1 year, 2 months ago release-R116-15509.B stabilize-15509.37.B stabilize-15509.63.B stabilize-15509.72.B
  63. 6e906e0 minijail: add ruleset status function to API by Ben Scarlato · 1 year, 2 months ago
  64. 11bd7a6 minijail: check if `fp == NULL` and other cleanup by Ben Scarlato · 1 year, 2 months ago stabilize-15483.B stabilize-15485.B
  65. dac5fb7 minijail: use xstrdup() for all `= optarg` assignments by Ben Scarlato · 1 year, 3 months ago release-R115-15474.B stabilize-15474.38.B stabilize-15474.53.B stabilize-15474.70.B
  66. 524695a minijail: use xstrdup() for 'K' remount_mode by Ben Scarlato · 1 year, 3 months ago
  67. 1c2fa0a minijail: call setup_fs_rules_fd() early for API users by Ben Scarlato · 1 year, 3 months ago stabilize-15446.B
  68. 238e67a minijail: remove LANDLOCK_ACCESS_FS_REFER logs by Ben Scarlato · 1 year, 3 months ago
  69. b631ad7 Improve UsernsSupported() by Ryo Hashimoto · 1 year, 4 months ago
  70. cd0acf8 minijail: use xstrdup() for -S path by Ben Scarlato · 1 year, 4 months ago release-R114-15437.B stabilize-15432.B stabilize-15437.42.B stabilize-15437.57.B stabilize-15437.59.B stabilize-15439.B
  71. 5a5df38 minijail: skip populating ruleset for non-Landlock kernels by Ben Scarlato · 1 year, 4 months ago
  72. 206c614 minijail: don't evaluate users or paths for --gen-config by Ben Scarlato · 1 year, 4 months ago
  73. 63652dc libminijail: Add minijail_syscall_name by Allen Webb · 1 year, 4 months ago
  74. 574033b libminijail.h: add nonnull attributes to public APIs by Mike Frysinger · 1 year, 4 months ago
  75. 33737f5 minijail: add LANDLOCK_ACCESS_FS_REFER to access rights when supported by Ben Scarlato · 1 year, 4 months ago stabilize-15415.B
  76. 3ee4393 minijail: use set_preload_path() to avoid incorrect preload path by Ben Scarlato · 1 year, 5 months ago release-R113-15393.B stabilize-15393.48.B stabilize-15393.58.B stabilize-15395.B
  77. 13be56d minijail: update man page with Landlock flags by Ben Scarlato · 1 year, 5 months ago firmware-skyrim-15390.B
  78. 2c7f52d minijail: update docs to use modern link in navbar.md by Ben Scarlato · 1 year, 5 months ago factory-skyrim-15384.B stabilize-15381.B
  79. c5854c7 Fail if a user namespace is requested without a PID namespace by Allen Webb · 1 year, 5 months ago firmware-skyrim-15369.B
  80. 0bbf93f Revert "minijail: remove MS_NOSYMFOLLOW def because ChromeOS is now on glibc 2.35." by Alistair Delva · 1 year, 5 months ago
  81. fcd87b1 Extend host glibc workaround to userfaultfd by Alistair Delva · 1 year, 5 months ago stabilize-15364.B
  82. 487fec3 Fix "Extend host glibc workaround to clone3" by Alistair Delva · 1 year, 9 months ago
  83. 671be7d minijail: add LANDLOCK_ACCESS_FS_REFER to Landlock defs by Ben Scarlato · 1 year, 5 months ago
  84. be978ea minijail: cleanup for use_preload if statements. by Ben Scarlato · 1 year, 6 months ago release-R112-15359.B stabilize-15359.45.B stabilize-15359.50.B stabilize-15359.58.B stabilize-15361.B
  85. 8125493 minijail: update docs to use modern link for sandboxing.md by Ben Scarlato · 1 year, 5 months ago
  86. 64b0376 minijail: allow Landlock to work with minijail_close_open_fds() by Ben Scarlato · 1 year, 6 months ago
  87. 067c765 minijail-sys: Require bindgen-0.63.0 by Bob Haarman · 1 year, 6 months ago
  88. eaf3bc0 minijail: brace formatting cleanup by Ben Scarlato · 1 year, 6 months ago
  89. 452a4ff minijail: enable Landlock for -k profiles by Ben Scarlato · 1 year, 6 months ago
  90. 92341b2 is_canonical_path: log realpath failures by Mike Frysinger · 1 year, 6 months ago
  91. 1dd5003 minijail: Expose is_fs_restriction_available by Hong Xu · 1 year, 6 months ago
  92. be93c13 minijail: determining fs restriction availability by Hong Xu · 1 year, 6 months ago
  93. 3341e83 Update Cargo.toml to fix execution of fork_remap test. by Allen Webb · 1 year, 6 months ago
  94. fad25d7 minijail: add error msg for non-writable --gen-config path. by Ben Scarlato · 1 year, 6 months ago stabilize-15335.B
  95. 8b78fec minijail: add --no-fs-restrictions flag. by Ben Scarlato · 1 year, 7 months ago release-R111-15329.B stabilize-15317.B stabilize-15329.44.B stabilize-15329.59.B
  96. 76d76dc generate_constants_json: Add riscv64 arch_nr by Dylan Reid · 1 year, 7 months ago
  97. 4b0a832 rust: update bindgen dependency to 0.60 by Daniel Verkamp · 1 year, 8 months ago stabilize-15300.B stabilize-15301.B
  98. 4b77753 minijail: add --gen-config option. by Ben Scarlato · 1 year, 7 months ago
  99. a597d35 minijail: call minijail_use_seccomp_filter for default runtime. by Ben Scarlato · 1 year, 8 months ago
  100. 597e075 minijail: return EPERM for cros_default_v0.policy denylist. by Ben Scarlato · 1 year, 8 months ago