• Various smaller bugfixes
• Updated man page
• Newer kafel with support for i386
• Updated Dockerfile

• Convert code to C++ to simplify sys/queue -> vector operations
• Make it compile under gcc/g++-4.8
• Add -m option for arbitrary mounts
• Create BPF policy once only

• open kafel file in each kafel subproc individually to avoid file posiiton sharing
• more and better examples in configs/

• fixed --max_conns_per_ip
• made it compilable under OpenWRT
• removed lingering -fblocks code
• better config example for ImageMagick
• fixed check for non-existent group- and user-names

• Works correctly with some archs which need aligned stack for clone (e.g. aarch64)
• Enable CLONE_NEWCGROUP by default (can be disabled)
• Added CTRL+\ (SIGQUIT) handler to show all connections
• Create new dirs in /run/user/ first (instead of /tmp)
• Unblock all signals prior to execve
• Don't start new ns-init id CLONE_NEWPID is not requested
• Support cgroup net_cls subsystem
• Mount: better statvfs -> mount flags mapping

• Works correctly with some 32bit platforms that use setres(u|g)id32
• Supports executing binaries through execveat
• New config example for busybox which demonstrates use of execveat

Fixes a crash in <= nsjail-1.9 where a stack variable was incorrectly marked as 'static', overflowing an array after a couple hundred of executions of a single program (e.g. in -Ml and -Mr modes)

BROKEN - can crash nsjail after a couple hundred of iterations in -Ml and -Mr modes. Use version 2.0 instead.

• Remove dependency on libcap-dev (which didn't understand newer capabilities)
• Add /proc manipulation options (path and R/W)
• Add hard/soft/inf options to config.proto for rlimits
• Make it compile under uClibc

• Make Dockerfile compilable with libprotobuf (C++)
• Fix NULL crashes if certain values were not set in the config file (e.g. hostname)

• BROKEN - config.proto defaults don't work correctly (might crash with NULL if e.g. hostname is not set in the config file)
• Depends on C++ libprotobuf now (libprotobuf-c was buggy, and didn't support text-format by default)
• nsjail exits with 255 now in case of startup errors (formerly: with 1)
• man page (thx to John Vogel)