xSmurf
|
6f0a1ea94b
|
Moved creation of /tmp in setup before chroot for whitelist support
|
9 years ago |
xSmurf
|
a7e891f4fc
|
Tentative: Adding seccomp default blacklist to xpra/xorg server and client
|
9 years ago |
xSmurf
|
f9214ee18f
|
Fix always set dbus machine-id in case program launches it
|
9 years ago |
xSmurf
|
2f7e27f121
|
Cleanup passing profile to seccomp wrapper and generic blacklist
|
9 years ago |
xSmurf
|
4ff81d924f
|
Tentative: dbus daemon setup for profiles that need it
|
9 years ago |
xSmurf
|
9dbfaec596
|
Creation of /var/run/user/<uid> inside of rootfs setup
|
9 years ago |
dma
|
1b05e93908
|
Merge remote-tracking branch 'origin/master'
Conflicts:
oz-init/init.go
|
9 years ago |
dma
|
aa9a2966bc
|
Blacklist support in oz-init.
|
9 years ago |
xSmurf
|
50556b1bf7
|
Small fixes
|
9 years ago |
xSmurf
|
3f466e9d8e
|
Changed passing of init data through stdin, added support for user groups to be set properly, cleanup torbrowser profile
|
9 years ago |
xSmurf
|
fd929aba6b
|
fmt
|
9 years ago |
xSmurf
|
6df101331f
|
Cleanup
|
9 years ago |
dma
|
2356480035
|
Remove some debug output.
|
9 years ago |
dma
|
ee4349cb61
|
Merge remote-tracking branch 'origin/master'
Conflicts:
oz-mount/mount.go
|
9 years ago |
dma
|
94da04bbc8
|
Add seccomp wrapper to oz-init
|
9 years ago |
xSmurf
|
2a10500049
|
Fixed passing of usefulldev
|
10 years ago |
xSmurf
|
89579c5673
|
Typo
|
10 years ago |
xSmurf
|
ac66ebb47f
|
Added /var/crashes to list of empty directories
|
10 years ago |
xSmurf
|
ce1026bced
|
Pass proper creds to xpra.Stop()
|
10 years ago |
xSmurf
|
2d0b33ce7e
|
Cleanup of checking for recursing sandboxes from oz-client
|
10 years ago |
brl
|
f7931e1ff7
|
Merge remote-tracking branch 'origin/master'
|
10 years ago |
brl
|
764b963ab6
|
move rootfs setup to oz-init
|
10 years ago |
brl
|
818b1124d6
|
don't hang when xpra client fails to launch
|
10 years ago |
brl
|
4e12488ca5
|
resolve vars and globbing internally in fs package
|
10 years ago |
brl
|
539bed1768
|
use os.Getpid() != 1 to detect and warn about manual launch
|
10 years ago |
brl
|
d8fd556219
|
should use BindOrCreate here
|
10 years ago |
brl
|
351cc883f0
|
big fs refactor to use a single rootfs
|
10 years ago |
xSmurf
|
082cfa105a
|
Added `all` option to kill command
|
10 years ago |
xSmurf
|
154c8ac5e9
|
TENTATIVE: Added support for multiple executable for a single profile - Some minor cleanup
|
10 years ago |
xSmurf
|
ca40c190df
|
Prevent oz-init from being called without root, or manually
|
10 years ago |
xSmurf
|
2135084b86
|
Fixed pwd when directory is not included in sandbox
|
10 years ago |
xSmurf
|
0f682806ab
|
Fixed passing of pwd to command, fixed home environment variable to launchEnv, fixed PATH var
|
10 years ago |
xSmurf
|
8ff505f2e3
|
Oz setup utility, handling of launching from diverted binary, handling of launching in running sandbox
|
10 years ago |
xSmurf
|
00d1aabc25
|
Fixed passing of env vars
|
10 years ago |
xSmurf
|
ab90dcadd5
|
Merge branch 'master' of ssh://github.com/subgraph/oz
|
10 years ago |
xSmurf
|
74d85b79a4
|
Checking of config file permissions
|
10 years ago |
brl
|
7de476e533
|
Merge remote-tracking branch 'origin/master'
|
10 years ago |
brl
|
568477fdbf
|
attempt to cleanly stop spawned processes when shutting down
|
10 years ago |
xSmurf
|
fe2776b1ad
|
Sanitizing of environment variables and fixed passing of vars to shell
|
10 years ago |
brl
|
2b2de2fa31
|
now you can kill sandboxes
|
10 years ago |
brl
|
45c64e6230
|
put back the .unsafe prefix
|
10 years ago |
brl
|
d1bb0fdeec
|
pass all environment from ./oz to applications launched from oz-init
(+ gofmt)
|
10 years ago |
xSmurf
|
17436d71e4
|
When entering a shell, if available, set the display number in the environment
|
10 years ago |
xSmurf
|
a877d5d5be
|
If available, set a home directory env var and chdir to it when entering a shell
|
10 years ago |
xSmurf
|
e20be3ea0a
|
Added tentative restricted /dev using mknod, and configuration to disable the feature
|
10 years ago |
xSmurf
|
914ff955d7
|
Cleanup
|
10 years ago |
xSmurf
|
ed1df1a761
|
Fixed passing display number 0
|
10 years ago |
xSmurf
|
f7fcf24f71
|
Working networking and minor fixes (mainly config flags)
|
10 years ago |
xSmurf
|
a76fcb0217
|
Added sandbox base path to global config
|
10 years ago |
brl
|
5c9f8b40ad
|
1) actually launch application
2) improved signaling from oz-init to oz-daemon when ready
|
10 years ago |