1. d7972be Build the forkserver in sandboxed-api by A. Cody Schuffelen · 10 months ago
  2. a1fed77 Start a build target for building sandbox2 by A. Cody Schuffelen · 11 months ago
  3. 79ab44c drop almost all capabilities during sandbox creation by Sandboxed API Team · 11 months ago
  4. 4630346 Fix unaligned load by Wiktor Garbacz · 11 months ago
  5. 0940a9e Export `config.h` from `syscall.h` for `sapi::cpu::Architecture` by Wiktor Garbacz · 12 months ago
  6. 37a7432 Remove deprecated comms functions by Wiktor Garbacz · 12 months ago
  7. fadfa79 Add missing return by Wiktor Garbacz · 12 months ago
  8. ee7b76f Automated rollback of commit 4ae281b6a25334da65c441885849c61a12ecd2b3. by Sandboxed API Team · 12 months ago
  9. 4ae281b Remove deprecated comms functions by Wiktor Garbacz · 1 year ago
  10. 9a985f9 Replace use of deprecated `sandbox2::Comms` functions by Wiktor Garbacz · 1 year ago
  11. 227daf4 Do 1 level of recursion on libunwind crashes by Wiktor Garbacz · 1 year ago
  12. 1cf45be Refactor Comms to split out listening/connecting part by Wiktor Garbacz · 1 year ago
  13. d26262d Remove stale comment by Wiktor Garbacz · 1 year ago
  14. 37b3a51 Use empty instead of length by Sandboxed API Team · 1 year ago
  15. f5830c9 Ensure that TCMalloc can execute NumCPUs. by Chris Kennelly · 1 year ago
  16. 700f8fa Skip sanitizers for limits_test by Wiktor Garbacz · 1 year ago
  17. 1475458 namespace_test: use lstat instead of stat, don't descent into procfs & sysfs by Wiktor Garbacz · 1 year ago
  18. b47a5ea Add TCMalloc related files to test policy by Wiktor Garbacz · 1 year ago
  19. 4289b64 Disallow clone3, unsafe clone and unshare flags by Wiktor Garbacz · 1 year ago
  20. 77f62cc Remove unused `NetworkProxyClient::ConnectHandler` by Wiktor Garbacz · 1 year ago
  21. f614862 Remove deprecated VecStringToCharPtrArr by Wiktor Garbacz · 1 year ago
  22. b350a41 Gather more coverage data by Wiktor Garbacz · 1 year ago
  23. f6ec787 PtraceMonitor: Add a hard deadline for waiting for kill to take effect by Wiktor Garbacz · 1 year, 1 month ago
  24. 98d7f91 Run more tests with sanitizers and coverage by Wiktor Garbacz · 1 year, 1 month ago
  25. 92aeadd PolicyBuilder: test error conditions for AddPolicyOnSyscalls by Wiktor Garbacz · 1 year, 1 month ago
  26. 02d770a NetworkProxyTest: test more error conditions by Wiktor Garbacz · 1 year, 1 month ago
  27. b088c01 Add missing Aarch64 syscall entries by Wiktor Garbacz · 1 year, 1 month ago
  28. 5f96986 Better network proxy tests by Wiktor Garbacz · 1 year, 1 month ago
  29. 3ea3158 Remove mutexes from Comms by Wiktor Garbacz · 1 year, 1 month ago
  30. 197f03a Adjust code so that variable name is correct by Wiktor Garbacz · 1 year, 1 month ago
  31. e23acfd Made slight optimizations in Sandbox2's comms. by Jaeden Quintana · 1 year, 1 month ago
  32. 2c9ac02 Rework network_proxy related tests/examples by Wiktor Garbacz · 1 year, 1 month ago
  33. a0eb8d4 Increase limits in ElfParser by Sandboxed API Team · 1 year, 1 month ago
  34. dc25251 Enable sandboxed stack traces for coverage by Wiktor Garbacz · 1 year, 1 month ago
  35. f715bd8 Run more tests with coverage enabled by Wiktor Garbacz · 1 year, 1 month ago
  36. 47c868e Merge block bpf/ptrace tests by Wiktor Garbacz · 1 year, 1 month ago
  37. 5802d5b Refactor Forkserver::LaunchChild by Wiktor Garbacz · 1 year, 1 month ago
  38. 09a48ba Reduce CHECK-failures in unotify monitor by Wiktor Garbacz · 1 year, 1 month ago
  39. 4a6b0d4 Always override forkservers comms_fd in sandboxee by Wiktor Garbacz · 1 year, 1 month ago
  40. 0150026 Make PolicyBuilder helpers more self-contained by Wiktor Garbacz · 1 year, 1 month ago
  41. 37f0099 Final round of IWYU fixes for Sandbox2 by Wiktor Garbacz · 1 year, 1 month ago
  42. c04ef45 CMake: Re-add missing library deps due to bad merge by Christian Blichmann · 1 year, 1 month ago
  43. 7de1c4d More IWYU annotations by Wiktor Garbacz · 1 year, 1 month ago
  44. c175ac2 Fix missing dep for users of SANDBOX2_TRACE by Wiktor Garbacz · 1 year, 1 month ago
  45. edde724 Internal change by Wiktor Garbacz · 1 year, 1 month ago
  46. 8254d13 Reenable the stack_trace_test by Wiktor Garbacz · 1 year, 1 month ago
  47. d5ff466 Support passing `stderrthreshold` to sandboxee by Christian Blichmann · 1 year, 1 month ago
  48. 3adc232 Add missing dependencies bazel/BUILD by Wiktor Garbacz · 1 year, 1 month ago
  49. 127176d Bulk IWYU and build_cleaner fixes by Wiktor Garbacz · 1 year, 1 month ago
  50. 38e5be9 Temporarily disable a non-sandboxed crash stack_trace_test by Wiktor Garbacz · 1 year, 1 month ago
  51. eaf8ef8 Sandboxed API: Env vars: Set `GOOGLE_STDERRTHRESHOLD` used by OSS Abseil by Christian Blichmann · 1 year, 1 month ago
  52. 0036d9d Update Abseil by Wiktor Garbacz · 1 year, 1 month ago
  53. 6986af5 IWYU fixes by Wiktor Garbacz · 1 year, 1 month ago
  54. 696d0ee Add IWYU pragma by Wiktor Garbacz · 1 year, 1 month ago
  55. 9dcc9db Replace StrError with PLOG by Wiktor Garbacz · 1 year, 1 month ago
  56. 41003aa Automated rollback of commit 1e26cd50dc5d6ad3dfef47dbabdf669f812d9bf5. by Sandboxed API Team · 1 year, 1 month ago
  57. c4660f8 Provide sealing flags if not defined in the headers by Wiktor Garbacz · 1 year, 1 month ago
  58. e75be07 Automated rollback of commit 9c2174446004e4f712cb566ade05721be6653ed0. by Wiktor Garbacz · 1 year, 1 month ago
  59. 8a6b689 Cleanup includes by Wiktor Garbacz · 1 year, 1 month ago
  60. 632fdc6 Add missing includes by Wiktor Garbacz · 1 year, 1 month ago
  61. 1e26cd5 Always override forkservers comms_fd in sandboxee by Wiktor Garbacz · 1 year, 1 month ago
  62. 56d11ae Client::PrepareEnvironment simplify by supporting just a single preserved fd by Wiktor Garbacz · 1 year, 1 month ago
  63. 1e9b686 Make `Comms` movable by Wiktor Garbacz · 1 year, 1 month ago
  64. 08b81b5 Internal change by Wiktor Garbacz · 1 year, 1 month ago
  65. bf9fe79 Introduce a SAPI_RAW_VLOG_IS_ON just for raw_logging by Wiktor Garbacz · 1 year, 1 month ago
  66. ff23e87 Prefer regular logging to raw_logging by Wiktor Garbacz · 1 year, 1 month ago
  67. b258535 Treat libunwind sandbox as a ~regular sandboxee by Wiktor Garbacz · 1 year, 1 month ago
  68. 6a64659 Use default SAPI policy in the examples by Wiktor Garbacz · 1 year, 1 month ago
  69. 77fbfa7 forkserver: use eventfd instead pipe for initial namespace creation by Wiktor Garbacz · 1 year, 1 month ago
  70. 5d13550 Allow set_robust_list for TSAN by Wiktor Garbacz · 1 year, 1 month ago
  71. 18c64ae Adjust sandboxed_api default policy by Wiktor Garbacz · 1 year, 1 month ago
  72. f378d22 Clang tool: Skip protobuf namespaces when emitting headers by Christian Blichmann · 1 year, 1 month ago
  73. 0a0bf05 Readd VLOGs removed by mistake by Wiktor Garbacz · 1 year, 1 month ago
  74. 7d78b89 Fix typo. by Sandboxed API Team · 1 year, 1 month ago
  75. 034f240 In Sandbox2 IPC class, add a MapDupedFd() function to allow application to retain ownership of the local_fd. by Sandboxed API Team · 1 year, 1 month ago
  76. abd3faf monitor_unotify: Use eventfd instead of pipe for notifications by Wiktor Garbacz · 1 year, 1 month ago
  77. 7a57d32 forkserver: Remove waitpid flag by Wiktor Garbacz · 1 year, 1 month ago
  78. c501379 Clang tool: Prevent extra nesting of namespaces by Christian Blichmann · 1 year, 1 month ago
  79. 1c25967 Clearer logs on execveat failures by Wiktor Garbacz · 1 year, 1 month ago
  80. ae3d334 generator2: Skip anonymous structs/unions by Christian Blichmann · 1 year, 1 month ago
  81. 352d1f8 Clang tool: Emit aggregates with default initialized members by Christian Blichmann · 1 year, 1 month ago
  82. 8b70461 Automated rollback of commit a946cedc95382df24a707384e60bb058177d2812. by Wiktor Garbacz · 1 year, 1 month ago
  83. a946ced PtraceMonitor: Add a hard deadline for waiting for kill to take effect by Wiktor Garbacz · 1 year, 1 month ago
  84. 01e14e0 Fix bypass for enabling `ptrace`/`bpf` by Wiktor Garbacz · 1 year, 1 month ago
  85. 3079d2b Make Policy a simple copyable type by Wiktor Garbacz · 1 year, 1 month ago
  86. c14312c Kill on each iteration of graceful exit loop by Wiktor Garbacz · 1 year, 1 month ago
  87. 48bbb06 Move log warning about non-namespaced stacktraces by Wiktor Garbacz · 1 year, 1 month ago
  88. 4890c86 Mark GetNamespaceDescription const by Wiktor Garbacz · 1 year, 1 month ago
  89. dd66440 More verbose logging on graceful exit timeout by Wiktor Garbacz · 1 year, 2 months ago
  90. 0a0ac6a Automated rollback of commit 4d625e521b8f6d6f3209aa703a816b2b1f3b35c0. by Sandboxed API Team · 1 year, 2 months ago
  91. 7722c07 Mark `Mounts::RecursivelyListMounts()` const by Wiktor Garbacz · 1 year, 2 months ago
  92. 4d625e5 Move log warning about non-namespaced stacktraces by Wiktor Garbacz · 1 year, 2 months ago
  93. 3f9e9a2 Make Namespace copyable, movable and copy/move assignable by Wiktor Garbacz · 1 year, 2 months ago
  94. 29b7b49 Use return value directly instead of SAPI_ASSIGN_OR_RETURN dance by Wiktor Garbacz · 1 year, 2 months ago
  95. fc8a234 Rename GetCloneFlags by Wiktor Garbacz · 1 year, 2 months ago
  96. 8fbe21c Really give priority to main_pid by Wiktor Garbacz · 1 year, 2 months ago
  97. 3bbb98c Better error when calling RunAsync on a Sandbox2 instance twice by Wiktor Garbacz · 1 year, 2 months ago
  98. 1c960e8 EmbedFile: Reopen memfds as readonly to workaround problems with CRIU by Wiktor Garbacz · 1 year, 2 months ago
  99. eaa175c Sandbox2: Remove file sealing for in-memory files. by Oliver Kunz · 1 year, 2 months ago
  100. 04ed899 Adding AllowOpen to AllowLlvmSanitizers to avoid having to add AllowOpen in addition when it's only needed for running under the sanitizers. by Oliver Kunz · 1 year, 2 months ago