10 Commits

Author	SHA1	Message	Date
Robert Swiecki	ee2d05e874	Integrate a seccomp user notification to trace and log sandboxed filesystem and network operations ... * Introduces a dedicated, async worker thread that monitors SECCOMP_RET_USER_NOTIF events * Produces telemetry using protobufs to track resolved namespace paths, and network endpoints	2026-04-03 11:20:02 +02:00
Robert Swiecki	06350410ac	nsjail.h+all: move nsjail::NsJailConfig into struct nsj_t to avoid parameter duplicaiton. Now nsjail::NsJailConfig is the source of configuration truth for jails	2025-11-24 07:21:35 +01:00
Robert Swiecki	2545fcd3a9	nsjail: free seccomp filter upon nsjail exit	2018-02-12 17:09:45 +01:00
Robert Swiecki	4494deffa7	omit keyword 'struct'	2018-02-10 15:50:12 +01:00
Robert Swiecki	bd0c3fea69	sandbox: move to C++	2018-02-09 17:16:41 +01:00
Robert Swiecki	354c5ae47b	open kafel file in each kafel subproc individually to avoid file pos sharing	2018-01-31 16:04:39 +01:00
Robert Swiecki	58d6b3075c	Move struct nsjail_t definition to nsjail.h and leave only macros in common.h	2017-10-18 14:27:34 +02:00
Robert Swiecki	74b43346bd	make indent	2017-10-08 23:00:45 +02:00
Jagger	eff4796c95	Correct (non-resrved) header guards	2016-03-11 02:45:43 +01:00
Robert Swiecki	0ca35aa942	Initial import	2015-05-14 23:44:48 +02:00