1. bbaabc5 Merge remote-tracking branch 'aosp/upstream-main' into 'aosp/main' by A. Cody Schuffelen · 4 months ago
  2. f708270 Add `DefaultAction(TraceAllSyscalls)` variant to `PolicyBuilder` by A. Cody Schuffelen · 5 months ago
  3. 044ba1c Return ENOSYS instead of hard denying clone3 by Wiktor Garbacz · 5 months ago
  4. 29a3b8c Add AllowAccess to SAPI's default policy by Wiktor Garbacz · 5 months ago
  5. b9c84a1 Allow restartable sequences access to poll. by Chris Kennelly · 5 months ago
  6. 0e98cce Permit TCMalloc to use MAP_FIXED_NOREPLACE. by Chris Kennelly · 5 months ago
  7. f2840b3 NullPtr: Change SAPI to accept regular `nullptr` for sandboxed API calls. by Oliver Kunz · 5 months ago
  8. fa53603 Use `absl::string_view` consistently by Wiktor Garbacz · 5 months ago
  9. 25cfb5e Adding missing syscalls to the syscall tables. by Sandboxed API Team · 5 months ago
  10. 824d894 Make sandbox2::SyscallTable::GetEntry public and add new helper GetEntries. by Sandboxed API Team · 5 months ago
  11. 28b4567 Allow `sched_getaffinity` in `AllowLlvmSanitizers` by Wiktor Garbacz · 5 months ago
  12. fbfc2b9 Handle `prlimit64` in `Allow*RLimit` by Wiktor Garbacz · 5 months ago
  13. 9a06f3a Change the order of including system include paths. by Sandboxed API Team · 5 months ago
  14. a56660f Allow restartable sequences' mmaps to name their VMAs. by Chris Kennelly · 5 months ago
  15. 3407ceb Merge "ANDROID: Statically link libc++ in sandbox2" into main by Treehugger Robot · 6 months ago
  16. 48c5dee ANDROID: Statically link libc++ in sandbox2 by A. Cody Schuffelen · 6 months ago
  17. fc610b7 Fix UB caused by uninitialized value. by Sandboxed API Team · 6 months ago
  18. 1339d0b Remove unneeded include by Wiktor Garbacz · 6 months ago
  19. 52babc1 logserver: Support non-UTF8 log messages by Wiktor Garbacz · 6 months ago
  20. abba1f7 Stop using bionic headers to build sandbox2 in glibc by A. Cody Schuffelen · 6 months ago
  21. e5370e9 Minor cleanups, no functional change. by Sandboxed API Team · 6 months ago
  22. 36e4b80 Introduce and prefer `AllowMmapWithoutExec` by Wiktor Garbacz · 6 months ago
  23. 1255f57 Provide an option to use the unotify monitor instead of the ptrace monitor. by Oliver Kunz · 6 months ago
  24. 0a992b6 Add special handling for global forkserver by Wiktor Garbacz · 6 months ago
  25. d95df64 Add a test for custom forkserver by Wiktor Garbacz · 6 months ago
  26. 39e4954 The current implementation of `Sandbox::Terminate` results in timeout's being reported to coroner in cases where a Restart or Terminate with graceful exit is requested. by Oliver Kunz · 6 months ago
  27. 19d8f47 Add clone3 to syscall defs by Wiktor Garbacz · 6 months ago
  28. 675a945 Add more files to the sandboxed_api_sandbox2 target am: 549ae36505 by A. Cody Schuffelen · 7 months ago
  29. 692625a Start a sandbox2 target, embedding the forkserver executable. am: 812828e09e by A. Cody Schuffelen · 7 months ago
  30. 4d34bdb Integrate LLVM at llvm/llvm-project@3287ae8f6520 by Dmitri Gribenko · 7 months ago
  31. 5ed720e SAPI_RAW_CHECK expects NUL-terminated strings by Wiktor Garbacz · 7 months ago
  32. 549ae36 Add more files to the sandboxed_api_sandbox2 target by A. Cody Schuffelen · 7 months ago
  33. 812828e Start a sandbox2 target, embedding the forkserver executable. by A. Cody Schuffelen · 7 months ago
  34. ce95449 Build the forkserver in sandboxed-api am: d7972be9d3 by A. Cody Schuffelen · 7 months ago
  35. a0ba1c5 Enable the ability to change the sandboxee's malloc implementation. The default is set to "@bazel_tools//tools/cpp:malloc", which is also the default for Bazel's cc_binary [1]. by Oliver Kunz · 7 months ago
  36. d7972be Build the forkserver in sandboxed-api by A. Cody Schuffelen · 7 months ago
  37. 9a171c7 Fix quoting for fedora build action by Wiktor Garbacz · 7 months ago
  38. dc8bcc9 Update github actions OS and dependencies versions by Wiktor Garbacz · 7 months ago
  39. 15fb5b9 Allow sigaltstack by Wiktor Garbacz · 7 months ago
  40. bc3c0ec Internal change by Wiktor Garbacz · 7 months ago
  41. 1bad376 Block `sigaltstack` with `ENOSYS` by default by Wiktor Garbacz · 7 months ago
  42. 4d5295a Start a build target for building sandbox2 am: a1fed775e7 by A. Cody Schuffelen · 7 months ago
  43. a1fed77 Start a build target for building sandbox2 by A. Cody Schuffelen · 8 months ago
  44. a9e22ba Remove .gitmodules am: 6457e527fc by A. Cody Schuffelen · 8 months ago
  45. 424f21b Record BSD 2 clause license in oss-internship-2020/openjpeg/examples/convert_h.patch am: 1c306e3321 by A. Cody Schuffelen · 8 months ago
  46. 879e332 Add Android.bp file to restrict visibility am: 3e69361cf8 by A. Cody Schuffelen · 8 months ago
  47. b7191cd Add metadata files am: 797a093f6b by A. Cody Schuffelen · 8 months ago
  48. e3dc5b1 Merge remote-tracking branch 'aosp/upstream-main' am: 220ae3e4cb by A. Cody Schuffelen · 8 months ago
  49. 6f90a6e don't drop CAP_SYS_PTRACE as it is apparently needed by sandbox by Sandboxed API Team · 8 months ago
  50. 6457e52 Remove .gitmodules by A. Cody Schuffelen · 11 months ago
  51. 1c306e3 Record BSD 2 clause license in oss-internship-2020/openjpeg/examples/convert_h.patch by A. Cody Schuffelen · 11 months ago
  52. 3e69361 Add Android.bp file to restrict visibility by A. Cody Schuffelen · 11 months ago
  53. 797a093 Add metadata files by A. Cody Schuffelen · 11 months ago
  54. 220ae3e Merge remote-tracking branch 'aosp/upstream-main' by A. Cody Schuffelen · 8 months ago
  55. 79ab44c drop almost all capabilities during sandbox creation by Sandboxed API Team · 8 months ago
  56. 4630346 Fix unaligned load by Wiktor Garbacz · 8 months ago
  57. 0940a9e Export `config.h` from `syscall.h` for `sapi::cpu::Architecture` by Wiktor Garbacz · 9 months ago
  58. 37a7432 Remove deprecated comms functions by Wiktor Garbacz · 9 months ago
  59. fadfa79 Add missing return by Wiktor Garbacz · 9 months ago
  60. ee7b76f Automated rollback of commit 4ae281b6a25334da65c441885849c61a12ecd2b3. by Sandboxed API Team · 9 months ago
  61. 4ae281b Remove deprecated comms functions by Wiktor Garbacz · 9 months ago
  62. 9a985f9 Replace use of deprecated `sandbox2::Comms` functions by Wiktor Garbacz · 9 months ago
  63. 227daf4 Do 1 level of recursion on libunwind crashes by Wiktor Garbacz · 9 months ago
  64. 1cf45be Refactor Comms to split out listening/connecting part by Wiktor Garbacz · 9 months ago
  65. d26262d Remove stale comment by Wiktor Garbacz · 9 months ago
  66. 37b3a51 Use empty instead of length by Sandboxed API Team · 9 months ago
  67. f5830c9 Ensure that TCMalloc can execute NumCPUs. by Chris Kennelly · 9 months ago
  68. 700f8fa Skip sanitizers for limits_test by Wiktor Garbacz · 9 months ago
  69. 1475458 namespace_test: use lstat instead of stat, don't descent into procfs & sysfs by Wiktor Garbacz · 9 months ago
  70. b47a5ea Add TCMalloc related files to test policy by Wiktor Garbacz · 9 months ago
  71. 4289b64 Disallow clone3, unsafe clone and unshare flags by Wiktor Garbacz · 9 months ago
  72. 77f62cc Remove unused `NetworkProxyClient::ConnectHandler` by Wiktor Garbacz · 9 months ago
  73. f614862 Remove deprecated VecStringToCharPtrArr by Wiktor Garbacz · 10 months ago
  74. b350a41 Gather more coverage data by Wiktor Garbacz · 10 months ago
  75. f6ec787 PtraceMonitor: Add a hard deadline for waiting for kill to take effect by Wiktor Garbacz · 10 months ago
  76. 98d7f91 Run more tests with sanitizers and coverage by Wiktor Garbacz · 10 months ago
  77. 92aeadd PolicyBuilder: test error conditions for AddPolicyOnSyscalls by Wiktor Garbacz · 10 months ago
  78. 02d770a NetworkProxyTest: test more error conditions by Wiktor Garbacz · 10 months ago
  79. b088c01 Add missing Aarch64 syscall entries by Wiktor Garbacz · 10 months ago
  80. 5f96986 Better network proxy tests by Wiktor Garbacz · 10 months ago
  81. 3ea3158 Remove mutexes from Comms by Wiktor Garbacz · 10 months ago
  82. 197f03a Adjust code so that variable name is correct by Wiktor Garbacz · 10 months ago
  83. e23acfd Made slight optimizations in Sandbox2's comms. by Jaeden Quintana · 10 months ago
  84. 2c9ac02 Rework network_proxy related tests/examples by Wiktor Garbacz · 10 months ago
  85. a0eb8d4 Increase limits in ElfParser by Sandboxed API Team · 10 months ago
  86. dc25251 Enable sandboxed stack traces for coverage by Wiktor Garbacz · 10 months ago
  87. f715bd8 Run more tests with coverage enabled by Wiktor Garbacz · 10 months ago
  88. 47c868e Merge block bpf/ptrace tests by Wiktor Garbacz · 10 months ago
  89. 5802d5b Refactor Forkserver::LaunchChild by Wiktor Garbacz · 10 months ago
  90. 09a48ba Reduce CHECK-failures in unotify monitor by Wiktor Garbacz · 10 months ago
  91. 4a6b0d4 Always override forkservers comms_fd in sandboxee by Wiktor Garbacz · 10 months ago
  92. 0150026 Make PolicyBuilder helpers more self-contained by Wiktor Garbacz · 10 months ago
  93. 37f0099 Final round of IWYU fixes for Sandbox2 by Wiktor Garbacz · 10 months ago
  94. c04ef45 CMake: Re-add missing library deps due to bad merge by Christian Blichmann · 10 months ago
  95. 7de1c4d More IWYU annotations by Wiktor Garbacz · 10 months ago
  96. c175ac2 Fix missing dep for users of SANDBOX2_TRACE by Wiktor Garbacz · 10 months ago
  97. edde724 Internal change by Wiktor Garbacz · 10 months ago
  98. 8254d13 Reenable the stack_trace_test by Wiktor Garbacz · 10 months ago
  99. d5ff466 Support passing `stderrthreshold` to sandboxee by Christian Blichmann · 10 months ago
  100. 3adc232 Add missing dependencies bazel/BUILD by Wiktor Garbacz · 10 months ago