 Michael Bolin
|
41b8f45b83
|
Merge ee0e8728fd into sapling-pr-archive-bolinfest
|
2026-03-06 14:45:48 -08:00 |
|
|
Michael Bolin
|
751e9463e4
|
merge commit for archive created by Sapling
|
2026-03-06 14:41:57 -08:00 |
|
|
Michael Bolin
|
ee0e8728fd
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
4ff802ef6b
|
config: add v3 filesystem permission profiles
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
83067a18e7
|
protocol: keep root carveouts sandboxed
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
66c5b0d249
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
d9845f56ca
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
a7965133a0
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
dc40ece846
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
bee47a2643
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
45efe16881
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
b08d15058b
|
merge commit for archive created by Sapling
|
2026-03-06 14:33:54 -08:00 |
|
|
Michael Bolin
|
5da322b66e
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
e5f38536d6
|
protocol: keep root carveouts sandboxed
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
7922fbda11
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
95a0381b79
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
42b9605ed5
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
f2323cabd4
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
b8dba89fa1
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
9e411471fb
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-06 14:12:25 -08:00 |
|
|
Michael Bolin
|
fac9b40c0b
|
config: add v3 filesystem permission profiles
|
2026-03-06 14:12:24 -08:00 |
|
|
Michael Bolin
|
04fad892e8
|
merge commit for archive created by Sapling
|
2026-03-06 13:39:46 -08:00 |
|
|
Michael Bolin
|
c19cf3802f
|
config: add v3 filesystem permission profiles
|
2026-03-06 13:39:40 -08:00 |
|
|
Michael Bolin
|
bae193f31e
|
merge commit for archive created by Sapling
|
2026-03-06 13:32:52 -08:00 |
|
|
Michael Bolin
|
f9f81ce99d
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 13:32:12 -08:00 |
|
|
Michael Bolin
|
c16e838f29
|
protocol: keep root carveouts sandboxed
|
2026-03-06 13:32:12 -08:00 |
|
|
Michael Bolin
|
314f4fca8a
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 13:25:11 -08:00 |
|
|
Michael Bolin
|
034d874495
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 13:25:10 -08:00 |
|
|
Michael Bolin
|
6888940e93
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 13:25:10 -08:00 |
|
|
Michael Bolin
|
3cec98b309
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 13:25:10 -08:00 |
|
|
Michael Bolin
|
a8d36af90e
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 13:25:10 -08:00 |
|
|
Michael Bolin
|
0d783d6e51
|
Merge 6ae22b1aef into sapling-pr-archive-bolinfest
|
2026-03-06 13:14:02 -08:00 |
|
|
Michael Bolin
|
26814b8be5
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-06 13:13:55 -08:00 |
|
|
Michael Bolin
|
6ae22b1aef
|
config: add v3 filesystem permission profiles
|
2026-03-06 13:13:54 -08:00 |
|
|
Michael Bolin
|
85b3f50e37
|
merge commit for archive created by Sapling
|
2026-03-06 13:07:04 -08:00 |
|
|
Michael Bolin
|
1a12cb5f3e
|
config: add v3 filesystem permission profiles
|
2026-03-06 13:06:57 -08:00 |
|
|
Michael Bolin
|
964fa6465a
|
merge commit for archive created by Sapling
|
2026-03-06 13:03:59 -08:00 |
|
|
Michael Bolin
|
05e4d082da
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 13:03:45 -08:00 |
|
|
Michael Bolin
|
b3a21ce009
|
protocol: keep root carveouts sandboxed
|
2026-03-06 13:03:45 -08:00 |
|
|
Michael Bolin
|
a9702e8e65
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 13:03:45 -08:00 |
|
|
Michael Bolin
|
7c42582572
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 13:03:45 -08:00 |
|
|
Michael Bolin
|
8451b4754d
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 13:03:45 -08:00 |
|
|
Michael Bolin
|
b1aa31b0ff
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 13:03:45 -08:00 |
|
|
Michael Bolin
|
36eee0e95b
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 13:03:45 -08:00 |
|
|
Michael Bolin
|
b4e9baaaff
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-06 13:03:45 -08:00 |
|
|
Michael Bolin
|
929eeaf2c9
|
config: add v3 filesystem permission profiles
|
2026-03-06 13:03:45 -08:00 |
|
|
Michael Bolin
|
f3af2e32b0
|
Merge bfc71971a8 into sapling-pr-archive-bolinfest
|
2026-03-06 12:27:06 -08:00 |
|
|
Michael Bolin
|
bfc71971a8
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 12:26:59 -08:00 |
|
|
Michael Bolin
|
a8119dae5f
|
protocol: keep root carveouts sandboxed
|
2026-03-06 12:26:59 -08:00 |
|
|
Michael Bolin
|
7c35d14add
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 12:26:59 -08:00 |
|