| Commit message (Expand) | Author | Age |
* | pulseaudio: use create_dir_as_user(); small adjustments | smitsohu | 2018-12-13 |
* | add create_empty_dir_as_user function, refactor | smitsohu | 2018-12-11 |
* | refactor private-cache and tmpfs | smitsohu | 2018-11-26 |
* | Misc. typos | luz.paz | 2018-11-19 |
* | recursive remounts: add fallback for old kernels, some improvements | smitsohu | 2018-11-04 |
* | little tweaks, cosmetic changes | smitsohu | 2018-10-26 |
* | fix: return with euid 0 | smitsohu | 2018-10-25 |
* | experimental: remounts child mount points as well (read-only, read-write, noe... | smitsohu | 2018-10-25 |
* | improve some error messages | smitsohu | 2018-10-17 |
* | rename expand_home -> expand_macros to better reflect usage and remove unneed... | Glenn Washburn | 2018-10-15 |
* | tentative fix: automatically mount libdir in chroot - #2176 | smitsohu | 2018-10-15 |
* | allow overriding of disable-mnt with noblacklist - #2154 | smitsohu | 2018-10-11 |
* | error strings | smitsohu | 2018-09-17 |
* | add switch to disable/enable private-cache | smitsohu | 2018-09-10 |
* | additional restrictions for write-permissions on chroot | smitsohu | 2018-09-02 |
* | error strings | smitsohu | 2018-09-01 |
* | consolidate and enhance checks run on chroot directory hierarchy (patch n/n) | smitsohu | 2018-09-01 |
* | reduce number of chown/chmod calls in fs_chroot | smitsohu | 2018-08-31 |
* | reject chroot if it is world-writable, related enhancements | smitsohu | 2018-08-30 |
* | more silencing of /sys umount warnings | smitsohu | 2018-08-29 |
* | silence warning about failed unmounting of /sys (overlay options) | smitsohu | 2018-08-29 |
* | fix and harden overlay options | smitsohu | 2018-08-28 |
* | cleanup, small improvements | smitsohu | 2018-08-25 |
* | close private-cache memleak | smitsohu | 2018-08-22 |
* | drop privs when permissions are changed in /run/user/$UID | smitsohu | 2018-08-22 |
* | merge from LTS branch: cleanup O_PATH, --private-template | startx2017 | 2018-06-19 |
* | Revert "mounting a tmpfs on ~/.cache directory (private-cache) by default" | Tad | 2018-06-14 |
* | mounting a tmpfs on ~/.cache directory (private-cache) by default | netblue30 | 2018-06-12 |
* | update man page (private-cache) | smitsohu | 2018-06-12 |
* | removed CFG_CHROOT_DESKTOP config option | netblue30 | 2018-06-11 |
* | glibc missing O_PATH definition on Debian 7 | netblue30 | 2018-06-09 |
* | add private-cache option | smitsohu | 2018-06-04 |
* | Merge pull request #1932 from RDProjekt/modules | netblue30 | 2018-05-12 |
|\ |
|
| * | Allow accessing /sys/module directory | RD Projekt | 2018-05-09 |
* | | harden read-write mounts, cleanup | smitsohu | 2018-05-11 |
|/ |
|
* | Add --keep-var-tmp and associated profile option | Chiraag Nataraj | 2018-05-01 |
* | conditional compile for debug code in fs.c | startx2017 | 2018-04-23 |
* | deprecating --force | netblue30 | 2018-04-03 |
* | overlay fixes and additional hardening | netblue30 | 2018-01-31 |
* | apparmor support for --chroot sandboxes | netblue30 | 2018-01-24 |
* | --overlay clanup | netblue30 | 2018-01-24 |
* | move copyright statement to 2018 | startx2017 | 2018-01-14 |
* | redirect output messages to stderr | startx2017 | 2017-12-14 |
* | strip trailing whitespace | Fred-Barclay | 2017-11-19 |
* | fix resolv.conf for chroot setups - #1639 | netblue30 | 2017-11-10 |
* | matching noblacklist in profile files with blacklist in disable-programs.inc | netblue30 | 2017-11-02 |
* | allow blacklists noexec etc. in private home directories; fix bug #1608 | netblue30 | 2017-10-20 |
* | fix resolv.conf in chroot, issue #1578 | netblue30 | 2017-09-28 |
* | --writable-run-user, solving ssh/gnupg authentication problems for smarcards | netblue30 | 2017-09-14 |
* | /proc/sys can be nosuid,noexec,nodev | Topi Miettinen | 2017-07-25 |