sandboxed-api

Generate sandboxes for C/C++ libraries automatically

APACHE-2.0 License

Stars
1.6K

Bot releases are visible (Hide)

sandboxed-api - latest Latest Release

Published by github-actions[bot] 9 months ago

sandboxed-api - latest

Published by github-actions[bot] 9 months ago

Commits

  • f708270: Add DefaultAction(TraceAllSyscalls) variant to PolicyBuilder (A. Cody Schuffelen)
sandboxed-api - latest

Published by github-actions[bot] 9 months ago

Commits

  • 29a3b8c: Add AllowAccess to SAPI's default policy (Wiktor Garbacz)
sandboxed-api - latest

Published by github-actions[bot] 9 months ago

Commits

  • b9c84a1: Allow restartable sequences access to poll. (Chris Kennelly)
sandboxed-api - latest

Published by github-actions[bot] 9 months ago

Commits

  • Change SAPI to accept regular nullptr for sandboxed API calls. (Oliver Kunz)
sandboxed-api - latest

Published by github-actions[bot] 9 months ago

Commits

  • 25cfb5e: Adding missing syscalls to the syscall tables. (Sandboxed API Team)
sandboxed-api - latest

Published by github-actions[bot] 9 months ago

Commits

  • 28b4567: Allow sched_getaffinity in AllowLlvmSanitizers (Wiktor Garbacz)
sandboxed-api - latest

Published by github-actions[bot] 10 months ago

Commits

  • fc610b7: Fix UB caused by uninitialized value. (Sandboxed API Team)
sandboxed-api - latest

Published by github-actions[bot] 10 months ago

Commits

  • 36e4b80: Introduce and prefer AllowMmapWithoutExec (Wiktor Garbacz)
sandboxed-api - latest

Published by github-actions[bot] 10 months ago

Commits

  • 1255f57: Provide an option to use the unotify monitor instead of the ptrace monitor. (Oliver Kunz)
sandboxed-api - latest

Published by github-actions[bot] 10 months ago

Commits

  • d95df64: Add a test for custom forkserver (Wiktor Garbacz)
sandboxed-api - latest

Published by github-actions[bot] 11 months ago

Commits

  • 39e4954: The current implementation of Sandbox::Terminate results in timeout's being reported to coroner in cases where a Restart or Terminate with graceful exit is requested. (Oliver Kunz)
sandboxed-api - latest

Published by github-actions[bot] 11 months ago

Commits

  • 19d8f47: Add clone3 to syscall defs (Wiktor Garbacz)
sandboxed-api - latest

Published by github-actions[bot] 11 months ago

Commits

  • a0ba1c5: Enable the ability to change the sandboxee's malloc implementation. The default is set to "@bazel_tools//tools/cpp:malloc", which is also the default for Bazel's cc_binary [1]. (Oliver Kunz)
sandboxed-api - latest

Published by github-actions[bot] 11 months ago

Commits

  • 9a171c7: Fix quoting for fedora build action (Wiktor Garbacz)
sandboxed-api - latest

Published by github-actions[bot] 11 months ago

Commits

  • dc8bcc9: Update github actions OS and dependencies versions (Wiktor Garbacz)
sandboxed-api - latest

Published by github-actions[bot] 11 months ago

Commits

  • 15fb5b9: Allow sigaltstack (Wiktor Garbacz)
sandboxed-api - latest

Published by github-actions[bot] 12 months ago

Commits

  • bc3c0ec: Internal change (Wiktor Garbacz)
sandboxed-api - latest

Published by github-actions[bot] 12 months ago

Commits

  • 1bad376: Block sigaltstack with ENOSYS by default (Wiktor Garbacz)
sandboxed-api - latest

Published by github-actions[bot] 12 months ago

Commits

  • 6f90a6e: don't drop CAP_SYS_PTRACE as it is apparently needed by sandbox (Sandboxed API Team)