- bfd22f2 Suppress `unused_must_use` warning for `into_raw_fd` by Keiichi Watanabe · 4 days ago main
- 17e8c90 Add `read_exactly` and use it in `minijail_from_fd` by Kostya Kortchinsky · 10 days ago firmware-R143-16463.2.B release-R143-16463.B
- a85c4cc Remove python version properties by Cole Faust · 6 weeks ago firmware-R142-16433.2.B release-R142-16433.B
- f01b740 Android: update i386 syslog() syscalls. by Elliott Hughes · 3 months ago factory-skywalker-16393.B firmware-ec-R141-16404.2.B firmware-skywalker-16378.B release-R141-16404.B stabilize-16404.45.B stabilize-starline-16397.B
- b0b5dc6 minijail: Rename MINIJAIL_ERR_JAIL to MINIJAIL_ERR_SECCOMP_VIOLATION by François Degros · 4 months ago firmware-ec-R140-16371.2.B release-R140-16371.B stabilize-starline-16370.B stabilize-starmie-16371.49.B stabilize-zork-16371.20.B linux-v2025.07.02
- 6cbed0b OWNERS: allow copybara to update common.mk automatically by Mike Frysinger · 7 months ago firmware-ec-R137-16267.2.B firmware-ec-R138-16295.2.B firmware-ec-R139-16328.2.B release-R137-16267.B release-R138-16295.B release-R139-16328.B stabilize-16267.43.B stabilize-16267.61.B stabilize-16267.66.B stabilize-16295.54.B stabilize-16295.65.B stabilize-16328.65.B stabilize-cfm-16295.54.B stabilize-hana-16295.54.B stabilize-pujjoga-16267.60.B stabilize-starline-16261.12.B stabilize-starline-16261.2.B stabilize-starline-16261.4.B stabilize-starline-16261.5.B stabilize-starline-16261.7.B stabilize-starline-16261.9.B stabilize-starline-16261.B stabilize-starline-16294.10.B stabilize-starline-16294.15.B stabilize-starline-16294.18.B stabilize-starline-16294.24.B stabilize-starline-16294.31.B stabilize-starline-16294.6.B stabilize-starline-16294.7.B stabilize-starline-16294.B stabilize-starline-16295.55.B stabilize-starline2-16295.54.B
- f2bb95f common.mk: update from platform2 by copybara · 7 months ago
- 64f1a53 Add support for new secure bits. by Christopher Ferris · 7 months ago
- 8330e01 gtest: update to 1.16.0 by Mike Frysinger · 8 months ago firmware-ec-R136-16238.2.B release-R136-16238.B stabilize-16238.47.B stabilize-starline-16232.2.B stabilize-starline-16232.5.B stabilize-starline-16232.B stabilize-starline-16234.2.B stabilize-starline-16234.B stabilize-starline-16245.B stabilize-starline-16246.B
- e942bb9 Use rlimit for large FD int in unittest by Devin Moore · 8 months ago firmware-ec-R135-16209.5.B release-R135-16209.B stabilize-starline-16216.B
- 7bdbb42 system: cleanup leaked FILE by George Burgess IV · 9 months ago stabilize-16197.B
- a057434 syscall_filter: don't log libc-compatibility allowlist additions by George Burgess IV · 9 months ago firmware-lvgl-16187.B
- e7d091e minijail: add global allowlist with two entries by George Burgess IV · 9 months ago
- 2210a3d rust: ignore kthreads in is_single_threaded() by Daniel Verkamp · 9 months ago firmware-ec-R134-16181.3.B release-R134-16181.B stabilize-16181.43.B stabilize-16181.44.B stabilize-16181.47.B stabilize-16181.48.B stabilize-starline-16182.8.B stabilize-starline-16182.B
- fc020fd common-mk: check support for -Wxor-used-as-pow by Daniel Verkamp · 12 months ago factory-rauru-16167.B firmware-android-rauru-16174.69.B firmware-cr50-mp-16160.B firmware-cr50-prepvt-16155.B firmware-ec-R133-16151.2.B firmware-rauru-16174.102.B firmware-rauru-16174.B release-R133-16151.B stabilize-starline-16126.B stabilize-starline-16150.2.B stabilize-starline-16150.B
- eac8ff9 seccomp: add mseal to seccomp policy (minijail example) by Jeff Xu · 12 months ago firmware-ec-R132-16093.3.B release-R132-16093.B stabilize-16093.68.B stabilize-16093.78.B stabilize-quickfix-16093.109.B stabilize-starline-16093.2.B stabilize-starline-16095.B
- ec73d1d minijail: add mseal by Jeff Xu · 1 year ago factory-brox-16086.B firmware-brox-16080.B stabilize-starline-16082.B stabilize-starline-16084.B
- aba4ec2 rust/minijail: Add the ability to log errors to an fd by Sargun Dhillon · 1 year, 1 month ago factory-nissa-16077.B firmware-R131-16062.B firmware-ec-R131-16063.2.B release-R131-16063.B stabilize-16055.B stabilize-16063.45.B stabilize-starline-16056.B
- 6ade1eb minijail: Introduce the ability to bypass multithreaded fork check by Sargun Dhillon · 1 year, 2 months ago
- 9b11855 minijail: Update common.mk to unbreak gcc and bfd builds by Tatsuyuki Ishi · 1 year, 2 months ago firmware-R130-16032.B release-R130-16033.B stabilize-16033.43.B stabilize-16033.58.B
- a1d725a tools: Add missing __init__.py by Jack Rosenthal · 1 year, 3 months ago
- 258b913 minijail: Update common.mk with symbolic and visibility flags by Tatsuyuki Ishi · 1 year, 4 months ago firmware-R128-15963.B firmware-R129-16001.B firmware-ec-R128-15964.23.B firmware-ti50-efi-15980.75.B firmware-ti50-mp-15980.B firmware-ti50-prepvt-15974.B release-R128-15964.B release-R129-16002.B stabilize-15964.20.B stabilize-15964.42.B stabilize-15964.9.B stabilize-16002.44.B stabilize-16002.51.B
- 76b25b8 build.rs: Add env vars to control build process by Dennis Kempin · 1 year, 4 months ago firmware-android-15949.B
- c3c4c29 config_parser: drop error checking by Mike Frysinger · 1 year, 4 months ago
- 2737548 parse_size: rewrite to simplify & handle more edge cases by Mike Frysinger · 1 year, 4 months ago
- 4501821 util: add nonnull annotations to helper functions by Mike Frysinger · 1 year, 4 months ago
- 66f087d cli: drop unnecessary --seccomp-bpf-binary optarg NULL check by Mike Frysinger · 1 year, 4 months ago
- a901686 cli: use bool in more places by Mike Frysinger · 1 year, 4 months ago
- 8d4dc0d cli: localize --preserve-fd temp variables by Mike Frysinger · 1 year, 4 months ago
- 655c034 Add common /etc paths to --fs-default-paths by Ben Scarlato · 1 year, 5 months ago firmware-R127-15916.B release-R127-15917.B stabilize-15917.61.B stabilize-15917.65.B stabilize-15926.B
- 793a7cc tools: seccomp_policy_lint_unittest: fix baselines by Mike Frysinger · 1 year, 5 months ago
- 99e8fd4 minijail-sys: Do not rely on libcap in build script by Sargun Dhillon · 1 year, 5 months ago stabilize-15905.B linux-v2024.05.22
- c1df6ba Set embedded_launcher: true for minijail tests by Cole Faust · 1 year, 7 months ago firmware-R126-15885.B firmware-android-geralt-15842.88.B firmware-geralt-15842.B firmware-hps-15892.B release-R125-15853.B release-R126-15886.B stabilize-15855.B stabilize-15857.B stabilize-15886.46.B stabilize-15886.63.B stabilize-15886.66.B stabilize-15888.B stabilize-hps-15890.B stabilize-quickfix-15886.43.B
- 156ff64 Update link to Sandboxing system services doc by Ben Scarlato · 1 year, 7 months ago factory-geralt-15840.B
- 5555403 minijail0(1): Correct --seccomp-bpf-binary section formatting by Brian Norris · 1 year, 8 months ago release-R124-15823.B stabilize-15823.40.B stabilize-15828.B stabilize-quickfix-15823.44.B
- 3755164 rust: add init_default_logging and enable it for tests by Allen Webb · 1 year, 9 months ago release-R123-15786.B stabilize-15786.48.B stabilize-15786.58.B stabilize-15793.B stabilize-quickfix-15786.49.B
- 8ee76d5 enable python linting by Mike Frysinger · 1 year, 9 months ago
- f206fb7 PRESUBMIT: enable cros lint on some files by Mike Frysinger · 1 year, 9 months ago
- 80e6f8a test: fix shellcheck lint errors by Mike Frysinger · 1 year, 9 months ago
- 7ae4822 tools: drop obsolete __future__ imports by Mike Frysinger · 1 year, 9 months ago
- c7a3649 setup.py: update version & python version requirement by Mike Frysinger · 1 year, 9 months ago
- b820827 setup.py: update license tags to reflect CrOS BSD usage by Mike Frysinger · 1 year, 9 months ago
- a8706d3 get_googletest.sh: fix shebang by Mike Frysinger · 1 year, 9 months ago
- e388978 format a few random files by Mike Frysinger · 1 year, 9 months ago
- 4cc8245 common.mk: sync with latest platform2 by Mike Frysinger · 1 year, 9 months ago
- cfff586 gen_{constants,syscalls}.sh: fix shellcheck lint errors by Mike Frysinger · 1 year, 9 months ago
- 4642def signal_handle: tweak si_syscall handling by Mike Frysinger · 1 year, 9 months ago
- f14fc32 generate_seccomp_policy: switch generated license header to CrOS BSD by Mike Frysinger · 1 year, 9 months ago
- 9e8e421 README: add GitHub pages details by Mike Frysinger · 1 year, 9 months ago
- 9c4a083 dev-rust/minijail: ignore failing unit test by Jim Pollock · 1 year, 9 months ago
- 1e1e0c9 minijail: Add function minijail_namespace_net_loopback() by François Degros · 1 year, 9 months ago stabilize-15756.B
- 06a0c3e seccomp_policy_lint: consider non-permissive rules safe by Allen Webb · 1 year, 10 months ago
- 38eb133 Add CLI option for --preserve-fd by Ben Scarlato · 1 year, 10 months ago release-R122-15753.B stabilize-15753.46.B stabilize-15753.55.B
- ba0b1c1 cleanup: replace username in TODO with bug number by Ben Scarlato · 1 year, 10 months ago
- 44d8edd Add ability to disable calling setsid() by Ben Scarlato · 1 year, 11 months ago
- 739400a gtest: update to 1.14.0 by Mike Frysinger · 1 year, 11 months ago factory-rex-15708.B firmware-rex-15709.B stabilize-15714.B
- 0097a51 OWNERS: avoid surfacing inactive owners by Mike Frysinger · 1 year, 11 months ago
- c2f2f5b system: add a max valid cap check by Mike Frysinger · 2 years ago release-R121-15699.B stabilize-15699.58.B stabilize-15699.66.B
- b7faa0a libminijail: Handle large file descriptors by Allen Webb · 2 years ago factory-brya-15684.B stabilize-15677.B
- e5600d0 Run `cros format` on .c, .h, and .cc files by Allen Webb · 2 years ago
- 2b3a9ca libminijail-private: Include sys/types.h for size_t by Allen Webb · 2 years ago
- 1efac88 tools: seccomp_policy_lint: handle stdin checking better by Mike Frysinger · 2 years, 1 month ago stabilize-15642.B stabilize-15654.B
- c3a4247 constants: include linux/random.h for GRND_RANDOM by Mike Frysinger · 2 years, 1 month ago stabilize-15633.44.B
- b6c2d68 seccomp_policy_lint: mark getrandom as dangerous by default by Mike Frysinger · 2 years, 1 month ago
- 65c4064 seccomp_policy_lint: support syscalls with known safe rules by Mike Frysinger · 2 years, 1 month ago
- b1b7a5d python: reformat with `cros format` (black) by Mike Frysinger · 2 years, 1 month ago
- 0d443e7 python: harmonize shebang & +x bits by Mike Frysinger · 2 years, 1 month ago
- a829072 python: switch license to CrOS by Mike Frysinger · 2 years, 1 month ago
- 6199d5d python: delete python 2 encoding cookie by Mike Frysinger · 2 years, 1 month ago
- 999a1c1 Don't log Landlock errors for kernel support by Ben Scarlato · 2 years, 2 months ago
- 68aa12f gtest: disable legacy case APIs by Mike Frysinger · 2 years, 3 months ago firmware-cr50-efi-15611.28.B firmware-cr50-mp-15611.B firmware-cr50-prepvt-15608.B release-R118-15604.B stabilize-15588.B stabilize-15604.16.B stabilize-15604.45.B stabilize-15604.56.B stabilize-15604.57.B stabilize-15610.B
- 907bbc8 build with C17 & C++20 by Mike Frysinger · 2 years, 3 months ago
- 2f6094f Reduce log messages when running minijail0. by Ben Scarlato · 2 years, 3 months ago release-R117-15572.B stabilize-15572.16.B stabilize-15572.39.B stabilize-15572.4.B stabilize-15572.50.B stabilize-15572.57.B stabilize-15572.63.B
- 48beabc tests: skip testing if code coverage is enabled by George Burgess IV · 2 years, 3 months ago
- fece65a minijail: update to _FORTIFY_SOURCE=3 by George Burgess IV · 2 years, 3 months ago stabilize-15564.B
- d4b6962 Fix Python deprecation warnings by Luca Farsi · 2 years, 4 months ago stabilize-15561.B stabilize-15562.B stabilize-15563.B
- 0211a3e Free |filter_path| before assignment. by Jorge Lucangeli Obes · 2 years, 4 months ago
- b75bf11 Check correct pointer for NULL. by Jorge Lucangeli Obes · 2 years, 4 months ago
- 0fa82d4 Free |filter| variable when exiting early. by Jorge Lucangeli Obes · 2 years, 4 months ago
- e330561 Ensure |filter_path| gets freed. by Jorge Lucangeli Obes · 2 years, 4 months ago
- efff2b7 gtest: update to 1.13.0 by Mike Frysinger · 2 years, 5 months ago stabilize-15511.B stabilize-15519.B stabilize-15531.B stabilize-15532.B
- 6cc77cd minijail-sys: Run minijail's `make` with jobs=4 by Keiichi Watanabe · 2 years, 5 months ago
- 89ac850 libminijail_unittest: Compare strings, not pointers by Christian Blichmann · 2 years, 5 months ago release-R116-15509.B stabilize-15509.37.B stabilize-15509.63.B stabilize-15509.72.B
- 6e906e0 minijail: add ruleset status function to API by Ben Scarlato · 2 years, 5 months ago
- 11bd7a6 minijail: check if `fp == NULL` and other cleanup by Ben Scarlato · 2 years, 5 months ago stabilize-15483.B stabilize-15485.B
- dac5fb7 minijail: use xstrdup() for all `= optarg` assignments by Ben Scarlato · 2 years, 6 months ago release-R115-15474.B stabilize-15474.38.B stabilize-15474.53.B stabilize-15474.70.B
- 524695a minijail: use xstrdup() for 'K' remount_mode by Ben Scarlato · 2 years, 6 months ago
- 1c2fa0a minijail: call setup_fs_rules_fd() early for API users by Ben Scarlato · 2 years, 6 months ago stabilize-15446.B
- 238e67a minijail: remove LANDLOCK_ACCESS_FS_REFER logs by Ben Scarlato · 2 years, 6 months ago
- b631ad7 Improve UsernsSupported() by Ryo Hashimoto · 2 years, 6 months ago
- cd0acf8 minijail: use xstrdup() for -S path by Ben Scarlato · 2 years, 7 months ago release-R114-15437.B stabilize-15432.B stabilize-15437.42.B stabilize-15437.57.B stabilize-15437.59.B stabilize-15439.B
- 5a5df38 minijail: skip populating ruleset for non-Landlock kernels by Ben Scarlato · 2 years, 7 months ago
- 206c614 minijail: don't evaluate users or paths for --gen-config by Ben Scarlato · 2 years, 7 months ago
- 63652dc libminijail: Add minijail_syscall_name by Allen Webb · 2 years, 7 months ago
- 574033b libminijail.h: add nonnull attributes to public APIs by Mike Frysinger · 2 years, 7 months ago
- 33737f5 minijail: add LANDLOCK_ACCESS_FS_REFER to access rights when supported by Ben Scarlato · 2 years, 7 months ago stabilize-15415.B
- 3ee4393 minijail: use set_preload_path() to avoid incorrect preload path by Ben Scarlato · 2 years, 8 months ago release-R113-15393.B stabilize-15393.48.B stabilize-15393.58.B stabilize-15395.B
- 13be56d minijail: update man page with Landlock flags by Ben Scarlato · 2 years, 8 months ago firmware-skyrim-15390.B
- 2c7f52d minijail: update docs to use modern link in navbar.md by Ben Scarlato · 2 years, 8 months ago factory-skyrim-15384.B stabilize-15381.B
- c5854c7 Fail if a user namespace is requested without a PID namespace by Allen Webb · 2 years, 8 months ago firmware-skyrim-15369.B