All pull requests

Pull requests

• nstun/tcp: drop guest packets received before the handshake completes

  #321·andreeapid opened Sep 1, 2026·

  ·
  1

• user: fail closed if supplementary groups survive a denied setgroups

  #320·andreeapid opened Sep 1, 2026·

  ·
  1

• mnt: re-flag every submount of a recursive bind

  #319·andreeapid opened Sep 1, 2026·

  ·
  1

• cmdline: reject inconsistent cgroup memory limits

  #318·samuelgirmametaferia opened Aug 31, 2026·

  ·
  1

• nstun: validate ICMP reply peers

  #317·samuelgirmametaferia opened Aug 30, 2026·

  ·
  1

• nstun: validate UDP reply peers

  #316·samuelgirmametaferia opened Aug 30, 2026·

  ·
  1

• nstun: preserve partial redirect targets

  #315·samuelgirmametaferia opened Aug 30, 2026·

  ·
  2

• nstun: enforce flow limits across address families

  #314·samuelgirmametaferia opened Aug 30, 2026·

  ·
  1

• mnt: fail closed when recursive mount restrictions cannot be applied

  #313·samuelgirmametaferia opened Aug 30, 2026·

  ·
  1

• mnt: decode escaped mountinfo paths

  #311·carrerasdarren-cell opened Aug 27, 2026Contributor·

  ·

• [RFC] Add option to create init inside the container

  #272·mattmart3 opened Jun 29, 2026·

  ·
  1