 Michael Bolin
|
fd752f952b
|
merge commit for archive created by Sapling
|
2026-03-06 15:33:39 -08:00 |
|
|
Michael Bolin
|
e63b228459
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 15:33:28 -08:00 |
|
|
Michael Bolin
|
7a229cc67b
|
protocol: keep root carveouts sandboxed
|
2026-03-06 15:33:28 -08:00 |
|
|
Michael Bolin
|
89441edb32
|
merge commit for archive created by Sapling
|
2026-03-06 15:27:35 -08:00 |
|
|
Michael Bolin
|
7d6d490ed4
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 15:27:22 -08:00 |
|
|
Michael Bolin
|
88cb1ba8fb
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 15:27:22 -08:00 |
|
|
Michael Bolin
|
24f07714b5
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 15:27:22 -08:00 |
|
|
Michael Bolin
|
1bd38597eb
|
protocol: keep root carveouts sandboxed
|
2026-03-06 15:27:22 -08:00 |
|
|
Michael Bolin
|
7357ee9077
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 15:27:22 -08:00 |
|
|
Michael Bolin
|
8d0d72c61a
|
merge commit for archive created by Sapling
|
2026-03-06 15:22:32 -08:00 |
|
|
Michael Bolin
|
f04febf58b
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 15:22:20 -08:00 |
|
|
Michael Bolin
|
3c052a333e
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 15:22:20 -08:00 |
|
|
Michael Bolin
|
99caae69b2
|
protocol: keep root carveouts sandboxed
|
2026-03-06 15:22:20 -08:00 |
|
|
Michael Bolin
|
8883fe0ff6
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 15:22:20 -08:00 |
|
|
Michael Bolin
|
9b81b65552
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 15:22:20 -08:00 |
|
|
Michael Bolin
|
42ff727f6f
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 15:22:20 -08:00 |
|
|
Michael Bolin
|
58ece05629
|
merge commit for archive created by Sapling
|
2026-03-06 15:20:28 -08:00 |
|
|
Michael Bolin
|
80859304d5
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 15:20:10 -08:00 |
|
|
Michael Bolin
|
f9db355578
|
protocol: keep root carveouts sandboxed
|
2026-03-06 15:20:10 -08:00 |
|
|
Michael Bolin
|
05e9b522f1
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 15:19:04 -08:00 |
|
|
Michael Bolin
|
6fbab753cb
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 15:19:04 -08:00 |
|
|
Michael Bolin
|
bddefc9edd
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 15:19:04 -08:00 |
|
|
Michael Bolin
|
7b5b968483
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 15:19:04 -08:00 |
|
|
Michael Bolin
|
4b6d18c755
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 15:19:04 -08:00 |
|
|
Michael Bolin
|
4544dd25b6
|
merge commit for archive created by Sapling
|
2026-03-06 15:17:38 -08:00 |
|
|
Michael Bolin
|
2dc364500b
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 15:17:07 -08:00 |
|
|
Michael Bolin
|
099a061460
|
protocol: keep root carveouts sandboxed
|
2026-03-06 15:17:07 -08:00 |
|
|
Michael Bolin
|
b483d481e9
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 15:17:07 -08:00 |
|
|
Michael Bolin
|
85a06286ce
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 15:15:48 -08:00 |
|
|
Michael Bolin
|
b1a6de9f00
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 15:15:14 -08:00 |
|
|
Michael Bolin
|
b2ddc1c49f
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 15:14:40 -08:00 |
|
|
Michael Bolin
|
cf4dd5b730
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 15:14:39 -08:00 |
|
|
Michael Bolin
|
0acad009b2
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-06 15:14:19 -08:00 |
|
|
Michael Bolin
|
5c6f557faa
|
merge commit for archive created by Sapling
|
2026-03-06 15:02:05 -08:00 |
|
|
Michael Bolin
|
bfbe45d517
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
487e6354ba
|
protocol: keep root carveouts sandboxed
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
9e76f2b75b
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
f7776662b5
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
8681522c0b
|
seatbelt: honor split filesystem sandbox policies
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
2e6098cd7b
|
safety: honor filesystem policy carveouts in apply_patch
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
c58266bb80
|
protocol: derive effective file access from filesystem policies
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
eb5869bec3
|
sandboxing: plumb split sandbox policies through runtime
|
2026-03-06 15:01:33 -08:00 |
|
|
Michael Bolin
|
39b15e3f45
|
config: add v3 filesystem permission profiles
|
2026-03-06 15:01:32 -08:00 |
|
|
Michael Bolin
|
41b8f45b83
|
Merge ee0e8728fd into sapling-pr-archive-bolinfest
|
2026-03-06 14:45:48 -08:00 |
|
|
Michael Bolin
|
751e9463e4
|
merge commit for archive created by Sapling
|
2026-03-06 14:41:57 -08:00 |
|
|
Michael Bolin
|
ee0e8728fd
|
linux-sandbox: honor split filesystem policies in bwrap
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
4ff802ef6b
|
config: add v3 filesystem permission profiles
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
83067a18e7
|
protocol: keep root carveouts sandboxed
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
66c5b0d249
|
sandboxing: preserve denied paths when widening permissions
|
2026-03-06 14:41:46 -08:00 |
|
|
Michael Bolin
|
d9845f56ca
|
linux-sandbox: plumb split sandbox policies through helper
|
2026-03-06 14:41:46 -08:00 |
|