Commit Graph

35 Commits

Author SHA1 Message Date
Wiktor Garbacz
1bb58083c4 use new kafel features in configs and examples 2018-09-06 14:19:01 +02:00
Robert Swiecki
5a8a178290 configs/bash: add noexec/nodev/nosuid to a mount 2018-07-27 22:54:28 +02:00
Robert Swiecki
06c5818abd configs/bash: add stderr_to_null 2018-06-25 04:12:07 +02:00
Robert Swiecki
bb5f8362b5 configs/ - typo 2018-02-20 15:54:28 +01:00
Robert Swiecki
dbc6fab582 config: allow to use soft/hard/inf limits for rlimits 2017-10-06 22:44:27 +02:00
Robert Swiecki
3ae090dad2 configs: format seccomp policies 2017-09-27 15:49:12 +02:00
Robert Swiecki
374f6cc4f0 config: Initial work on converting config.c to c++ protobuf lib
config: Initial work on converting config.c to c++ protobuf lib #2

config: Initial work on converting config.c to c++ protobuf lib #3

config: Initial work on converting config.c to c++ protobuf lib #4

config: Initial work on converting config.c to c++ protobuf lib #5

config: Initial work on converting config.c to c++ protobuf lib #6
2017-09-14 21:17:38 +02:00
Robert Swiecki
43e402af06 configs/bash: bring back changed euid for bash 2017-07-13 02:34:18 +02:00
Robert Swiecki
5683ea7e09 cmdline: better warning about uid/gid 0 2017-07-13 02:33:11 +02:00
Robert Swiecki
7226893b12 config: bind caps 2017-07-06 01:12:13 +02:00
Robert Swiecki
39ce9d22a7 caps: just local caps 2017-07-05 17:29:57 +02:00
Robert Swiecki
54a522326f caps: simplify capability operations 2017-07-05 15:57:07 +02:00
Andy Pan
b2855a8164 Add back ERRNO(1337) for example config 2017-07-04 04:26:37 +08:00
Robert Swiecki
5a68595a5b mount: allow for non-mandatory symlinks
mount: allow for non-mandatory symlinks
2017-07-02 03:40:47 +02:00
Robert Swiecki
e4aba73385 Allow to create symlinks 2017-06-29 00:32:20 +02:00
Robert Swiecki
69783dc200 config: max_cpu_num -> max_cpus 2017-06-21 17:52:16 +02:00
Robert Swiecki
89de032187 configs/bash: remove /dev/shm from bash cfg 2017-06-21 03:40:18 +02:00
Robert Swiecki
0c73e84af5 configs: add /dev/shm 2017-06-20 03:14:09 +02:00
Robert Swiecki
be083f6752 config: bind port to config 2017-06-19 23:52:56 +02:00
Robert Swiecki
ceaed43133 config: implement max_cpu_num in PB 2017-06-19 17:05:01 +02:00
Robert Swiecki
88d8570843 configs/bash: set argv[0] 2017-06-12 02:16:27 +02:00
Robert Swiecki
593943ec3a configs/bash-with-fake-geteuid: block ptrace, fix description 2017-05-29 16:57:04 +02:00
Robert Swiecki
6380474301 Simplify mountMount 2017-05-29 03:29:14 +02:00
Robert Swiecki
0271586e81 Get rid of pivot_root_only - achieve the same in different way 2017-05-29 03:11:32 +02:00
Robert Swiecki
285412c4dd configs/bash-with-fake-geteuid set home 2017-05-28 19:22:03 +02:00
Robert Swiecki
9dcb84572d configs/bash-with-fake-geteuid skip_setsid for job control 2017-05-28 19:21:22 +02:00
Robert Swiecki
785852ac22 configs/bash-with-fake-geteuid fancier PS1 2017-05-28 19:20:25 +02:00
Robert Swiecki
9db01ec991 config: implement keep caps 2017-05-28 19:17:48 +02:00
Robert Swiecki
6495f222ec configs/bash-with-fake-geteuid.cfg set TERM 2017-05-28 17:37:01 +02:00
Robert Swiecki
a2bbe667b9 config: switch is_ro to rw 2017-05-28 01:24:55 +02:00
Robert Swiecki
486aa7893b configs: small tweaks for bash 2017-05-28 00:17:18 +02:00
Robert Swiecki
e342959e0c configs: better description for bash-with-fake-geteuid.cfg 2017-05-27 19:17:25 +02:00
Robert Swiecki
d312ea0e46 config: add name and description 2017-05-27 19:06:46 +02:00
Robert Swiecki
b712afa1fc config: add name and description 2017-05-27 19:05:42 +02:00
Robert Swiecki
a545cfbe70 configs: rename config1.example -> bash-with-fake-geteuid.cfg 2017-05-27 18:45:25 +02:00