1. 01 Sep, 2015 1 commit
    • Colin Walters's avatar
      Drop -newnet variant · add40469
      Colin Walters authored
      This was just a hack which worked around a RHEL6 kernel bug.  I no
      longer care about RHEL6; linux-user-chroot is now just RHEL7 only.
      add40469
  2. 29 Aug, 2015 1 commit
  3. 28 Aug, 2015 1 commit
    • Colin Walters's avatar
      Add seccomp and rules imported from xdg-app/Sandstorm.io · 8cee4ab7
      Colin Walters authored
      seccomp is disabled by default for backwards compatibility.
      
      This "v0" version is a basic blacklist that turns off some of the
      known historical attack surface, initially imported from xdg-app.
      
      I added a note about code sharing - we should share rules among
      container implementations.
      8cee4ab7
  4. 25 Aug, 2015 2 commits
  5. 18 Aug, 2015 1 commit
  6. 05 Jun, 2015 1 commit
  7. 24 Sep, 2013 1 commit
  8. 24 Feb, 2013 4 commits
  9. 10 Jan, 2013 1 commit
  10. 30 Dec, 2012 1 commit
  11. 10 Aug, 2012 3 commits
  12. 24 Apr, 2012 4 commits
  13. 18 Apr, 2012 1 commit
  14. 13 Mar, 2012 5 commits
  15. 20 Feb, 2012 4 commits
  16. 22 Jan, 2012 1 commit
    • Colin Walters's avatar
      Allow being run as root · 1896ef83
      Colin Walters authored
      It was just an extra check to be sure we would be switching back to
      the right uid, but there's no reason not to allow executing this
      program as root.
      1896ef83
  17. 18 Jan, 2012 2 commits
  18. 16 Jan, 2012 1 commit
  19. 06 Jan, 2012 1 commit