 Kronecker
|
9bb27f2e02
|
feat(sandbox): install profile seccomp with ABI and inheritance checks
|
2026-10-07 19:16:20 +08:00 |
|
|
Kronecker
|
46714bd9ea
|
feat(sandbox): lease task identities and drop initialization privileges
|
2026-10-07 18:22:58 +08:00 |
|
|
Kronecker
|
329c9222a3
|
feat(sandbox): bind readonly inputs through authenticated capabilities
|
2026-10-07 17:57:10 +08:00 |
|
|
Kronecker
|
2b5e79dd39
|
feat(sandbox): restrict proc and devices in private roots
|
2026-10-07 13:21:37 +08:00 |
|
|
Kronecker
|
0f68eb5fb0
|
feat(sandbox): build private read-only roots with pivot_root
|
2026-10-07 10:02:21 +08:00 |
|
|
Kronecker
|
f22308080f
|
feat(sandbox): initialize isolated namespaces through gated helpers
|
2026-10-07 04:16:11 +08:00 |
|