Age | Commit message (Expand) | Author |
2016-11-04 | core: add new RestrictNamespaces= unit file setting | Lennart Poettering |
2016-11-03 | seccomp-util, analyze: export comments as a help string | Zbigniew Jędrzejewski-Szmek |
2016-11-03 | seccomp-util: move @default to the first position | Zbigniew Jędrzejewski-Szmek |
2016-11-02 | seccomp: add two new syscall groups | Lennart Poettering |
2016-11-02 | seccomp: include pipes and memfd in @ipc | Lennart Poettering |
2016-11-02 | seccomp: drop execve() from @process list | Lennart Poettering |
2016-11-02 | seccomp: add clock query and sleeping syscalls to "@default" group | Lennart Poettering |
2016-11-01 | seccomp: allow specifying arm64, mips, ppc (#4491) | Zbigniew Jędrzejewski-Szmek |
2016-10-24 | seccomp: add new helper call seccomp_load_filter_set() | Lennart Poettering |
2016-10-24 | seccomp: two fixes for the syscall set tables | Lennart Poettering |
2016-10-24 | seccomp: add new seccomp_init_conservative() helper | Lennart Poettering |
2016-10-24 | core: rework syscall filter set handling | Lennart Poettering |
2016-10-05 | seccomp: add support for the s390 architecture (#4287) | hbrueckner |
2016-09-06 | seccomp: also detect if seccomp filtering is enabled | Felipe Sateler |
2016-08-26 | Merge pull request #3984 from poettering/refcnt | Evgeny Vereshchagin |
2016-08-22 | core: do not fail at step SECCOMP if there is no kernel support (#4004) | Felipe Sateler |
2016-08-22 | seccomp: make sure getrlimit() is among the default permitted syscalls | Lennart Poettering |
2016-06-13 | core: improve seccomp syscall grouping a bit | Lennart Poettering |
2016-06-01 | core: add pre-defined syscall groups to SystemCallFilter= (#3053) (#3157) | Topi Miettinen |
2016-02-10 | tree-wide: remove Emacs lines from all files | Daniel Mack |
2015-12-06 | shared: include what we use | Thomas Hindoe Paaboel Andersen |
2015-11-16 | tree-wide: sort includes | Thomas Hindoe Paaboel Andersen |
2015-10-24 | util-lib: split our string related calls from util.[ch] into its own file str... | Lennart Poettering |
2014-02-18 | seccomp: add helper call to add all secondary archs to a seccomp filter | Lennart Poettering |
2014-02-13 | core: add SystemCallArchitectures= unit setting to allow disabling of non-native | Lennart Poettering |