- d7972be Build the forkserver in sandboxed-api by A. Cody Schuffelen · 10 months ago
- a1fed77 Start a build target for building sandbox2 by A. Cody Schuffelen · 11 months ago
- 79ab44c drop almost all capabilities during sandbox creation by Sandboxed API Team · 11 months ago
- 4630346 Fix unaligned load by Wiktor Garbacz · 11 months ago
- 0940a9e Export `config.h` from `syscall.h` for `sapi::cpu::Architecture` by Wiktor Garbacz · 12 months ago
- 37a7432 Remove deprecated comms functions by Wiktor Garbacz · 12 months ago
- fadfa79 Add missing return by Wiktor Garbacz · 12 months ago
- ee7b76f Automated rollback of commit 4ae281b6a25334da65c441885849c61a12ecd2b3. by Sandboxed API Team · 12 months ago
- 4ae281b Remove deprecated comms functions by Wiktor Garbacz · 1 year ago
- 9a985f9 Replace use of deprecated `sandbox2::Comms` functions by Wiktor Garbacz · 1 year ago
- 227daf4 Do 1 level of recursion on libunwind crashes by Wiktor Garbacz · 1 year ago
- 1cf45be Refactor Comms to split out listening/connecting part by Wiktor Garbacz · 1 year ago
- d26262d Remove stale comment by Wiktor Garbacz · 1 year ago
- 37b3a51 Use empty instead of length by Sandboxed API Team · 1 year ago
- f5830c9 Ensure that TCMalloc can execute NumCPUs. by Chris Kennelly · 1 year ago
- 700f8fa Skip sanitizers for limits_test by Wiktor Garbacz · 1 year ago
- 1475458 namespace_test: use lstat instead of stat, don't descent into procfs & sysfs by Wiktor Garbacz · 1 year ago
- b47a5ea Add TCMalloc related files to test policy by Wiktor Garbacz · 1 year ago
- 4289b64 Disallow clone3, unsafe clone and unshare flags by Wiktor Garbacz · 1 year ago
- 77f62cc Remove unused `NetworkProxyClient::ConnectHandler` by Wiktor Garbacz · 1 year ago
- f614862 Remove deprecated VecStringToCharPtrArr by Wiktor Garbacz · 1 year ago
- b350a41 Gather more coverage data by Wiktor Garbacz · 1 year ago
- f6ec787 PtraceMonitor: Add a hard deadline for waiting for kill to take effect by Wiktor Garbacz · 1 year, 1 month ago
- 98d7f91 Run more tests with sanitizers and coverage by Wiktor Garbacz · 1 year, 1 month ago
- 92aeadd PolicyBuilder: test error conditions for AddPolicyOnSyscalls by Wiktor Garbacz · 1 year, 1 month ago
- 02d770a NetworkProxyTest: test more error conditions by Wiktor Garbacz · 1 year, 1 month ago
- b088c01 Add missing Aarch64 syscall entries by Wiktor Garbacz · 1 year, 1 month ago
- 5f96986 Better network proxy tests by Wiktor Garbacz · 1 year, 1 month ago
- 3ea3158 Remove mutexes from Comms by Wiktor Garbacz · 1 year, 1 month ago
- 197f03a Adjust code so that variable name is correct by Wiktor Garbacz · 1 year, 1 month ago
- e23acfd Made slight optimizations in Sandbox2's comms. by Jaeden Quintana · 1 year, 1 month ago
- 2c9ac02 Rework network_proxy related tests/examples by Wiktor Garbacz · 1 year, 1 month ago
- a0eb8d4 Increase limits in ElfParser by Sandboxed API Team · 1 year, 1 month ago
- dc25251 Enable sandboxed stack traces for coverage by Wiktor Garbacz · 1 year, 1 month ago
- f715bd8 Run more tests with coverage enabled by Wiktor Garbacz · 1 year, 1 month ago
- 47c868e Merge block bpf/ptrace tests by Wiktor Garbacz · 1 year, 1 month ago
- 5802d5b Refactor Forkserver::LaunchChild by Wiktor Garbacz · 1 year, 1 month ago
- 09a48ba Reduce CHECK-failures in unotify monitor by Wiktor Garbacz · 1 year, 1 month ago
- 4a6b0d4 Always override forkservers comms_fd in sandboxee by Wiktor Garbacz · 1 year, 1 month ago
- 0150026 Make PolicyBuilder helpers more self-contained by Wiktor Garbacz · 1 year, 1 month ago
- 37f0099 Final round of IWYU fixes for Sandbox2 by Wiktor Garbacz · 1 year, 1 month ago
- c04ef45 CMake: Re-add missing library deps due to bad merge by Christian Blichmann · 1 year, 1 month ago
- 7de1c4d More IWYU annotations by Wiktor Garbacz · 1 year, 1 month ago
- c175ac2 Fix missing dep for users of SANDBOX2_TRACE by Wiktor Garbacz · 1 year, 1 month ago
- edde724 Internal change by Wiktor Garbacz · 1 year, 1 month ago
- 8254d13 Reenable the stack_trace_test by Wiktor Garbacz · 1 year, 1 month ago
- d5ff466 Support passing `stderrthreshold` to sandboxee by Christian Blichmann · 1 year, 1 month ago
- 3adc232 Add missing dependencies bazel/BUILD by Wiktor Garbacz · 1 year, 1 month ago
- 127176d Bulk IWYU and build_cleaner fixes by Wiktor Garbacz · 1 year, 1 month ago
- 38e5be9 Temporarily disable a non-sandboxed crash stack_trace_test by Wiktor Garbacz · 1 year, 1 month ago
- eaf8ef8 Sandboxed API: Env vars: Set `GOOGLE_STDERRTHRESHOLD` used by OSS Abseil by Christian Blichmann · 1 year, 1 month ago
- 0036d9d Update Abseil by Wiktor Garbacz · 1 year, 1 month ago
- 6986af5 IWYU fixes by Wiktor Garbacz · 1 year, 1 month ago
- 696d0ee Add IWYU pragma by Wiktor Garbacz · 1 year, 1 month ago
- 9dcc9db Replace StrError with PLOG by Wiktor Garbacz · 1 year, 1 month ago
- 41003aa Automated rollback of commit 1e26cd50dc5d6ad3dfef47dbabdf669f812d9bf5. by Sandboxed API Team · 1 year, 1 month ago
- c4660f8 Provide sealing flags if not defined in the headers by Wiktor Garbacz · 1 year, 1 month ago
- e75be07 Automated rollback of commit 9c2174446004e4f712cb566ade05721be6653ed0. by Wiktor Garbacz · 1 year, 1 month ago
- 8a6b689 Cleanup includes by Wiktor Garbacz · 1 year, 1 month ago
- 632fdc6 Add missing includes by Wiktor Garbacz · 1 year, 1 month ago
- 1e26cd5 Always override forkservers comms_fd in sandboxee by Wiktor Garbacz · 1 year, 1 month ago
- 56d11ae Client::PrepareEnvironment simplify by supporting just a single preserved fd by Wiktor Garbacz · 1 year, 1 month ago
- 1e9b686 Make `Comms` movable by Wiktor Garbacz · 1 year, 1 month ago
- 08b81b5 Internal change by Wiktor Garbacz · 1 year, 1 month ago
- bf9fe79 Introduce a SAPI_RAW_VLOG_IS_ON just for raw_logging by Wiktor Garbacz · 1 year, 1 month ago
- ff23e87 Prefer regular logging to raw_logging by Wiktor Garbacz · 1 year, 1 month ago
- b258535 Treat libunwind sandbox as a ~regular sandboxee by Wiktor Garbacz · 1 year, 1 month ago
- 6a64659 Use default SAPI policy in the examples by Wiktor Garbacz · 1 year, 1 month ago
- 77fbfa7 forkserver: use eventfd instead pipe for initial namespace creation by Wiktor Garbacz · 1 year, 1 month ago
- 5d13550 Allow set_robust_list for TSAN by Wiktor Garbacz · 1 year, 1 month ago
- 18c64ae Adjust sandboxed_api default policy by Wiktor Garbacz · 1 year, 1 month ago
- f378d22 Clang tool: Skip protobuf namespaces when emitting headers by Christian Blichmann · 1 year, 1 month ago
- 0a0bf05 Readd VLOGs removed by mistake by Wiktor Garbacz · 1 year, 1 month ago
- 7d78b89 Fix typo. by Sandboxed API Team · 1 year, 1 month ago
- 034f240 In Sandbox2 IPC class, add a MapDupedFd() function to allow application to retain ownership of the local_fd. by Sandboxed API Team · 1 year, 1 month ago
- abd3faf monitor_unotify: Use eventfd instead of pipe for notifications by Wiktor Garbacz · 1 year, 1 month ago
- 7a57d32 forkserver: Remove waitpid flag by Wiktor Garbacz · 1 year, 1 month ago
- c501379 Clang tool: Prevent extra nesting of namespaces by Christian Blichmann · 1 year, 1 month ago
- 1c25967 Clearer logs on execveat failures by Wiktor Garbacz · 1 year, 1 month ago
- ae3d334 generator2: Skip anonymous structs/unions by Christian Blichmann · 1 year, 1 month ago
- 352d1f8 Clang tool: Emit aggregates with default initialized members by Christian Blichmann · 1 year, 1 month ago
- 8b70461 Automated rollback of commit a946cedc95382df24a707384e60bb058177d2812. by Wiktor Garbacz · 1 year, 1 month ago
- a946ced PtraceMonitor: Add a hard deadline for waiting for kill to take effect by Wiktor Garbacz · 1 year, 1 month ago
- 01e14e0 Fix bypass for enabling `ptrace`/`bpf` by Wiktor Garbacz · 1 year, 1 month ago
- 3079d2b Make Policy a simple copyable type by Wiktor Garbacz · 1 year, 1 month ago
- c14312c Kill on each iteration of graceful exit loop by Wiktor Garbacz · 1 year, 1 month ago
- 48bbb06 Move log warning about non-namespaced stacktraces by Wiktor Garbacz · 1 year, 1 month ago
- 4890c86 Mark GetNamespaceDescription const by Wiktor Garbacz · 1 year, 1 month ago
- dd66440 More verbose logging on graceful exit timeout by Wiktor Garbacz · 1 year, 2 months ago
- 0a0ac6a Automated rollback of commit 4d625e521b8f6d6f3209aa703a816b2b1f3b35c0. by Sandboxed API Team · 1 year, 2 months ago
- 7722c07 Mark `Mounts::RecursivelyListMounts()` const by Wiktor Garbacz · 1 year, 2 months ago
- 4d625e5 Move log warning about non-namespaced stacktraces by Wiktor Garbacz · 1 year, 2 months ago
- 3f9e9a2 Make Namespace copyable, movable and copy/move assignable by Wiktor Garbacz · 1 year, 2 months ago
- 29b7b49 Use return value directly instead of SAPI_ASSIGN_OR_RETURN dance by Wiktor Garbacz · 1 year, 2 months ago
- fc8a234 Rename GetCloneFlags by Wiktor Garbacz · 1 year, 2 months ago
- 8fbe21c Really give priority to main_pid by Wiktor Garbacz · 1 year, 2 months ago
- 3bbb98c Better error when calling RunAsync on a Sandbox2 instance twice by Wiktor Garbacz · 1 year, 2 months ago
- 1c960e8 EmbedFile: Reopen memfds as readonly to workaround problems with CRIU by Wiktor Garbacz · 1 year, 2 months ago
- eaa175c Sandbox2: Remove file sealing for in-memory files. by Oliver Kunz · 1 year, 2 months ago
- 04ed899 Adding AllowOpen to AllowLlvmSanitizers to avoid having to add AllowOpen in addition when it's only needed for running under the sanitizers. by Oliver Kunz · 1 year, 2 months ago