 Xubin Ren
|
cf6ca13b6d
|
fix(exec): preserve bwrap workspace masking
|
2026-07-27 00:31:00 +08:00 |
|
 yu-xin-candXubin Ren
|
01a11b3980
|
feat(exec): allow extra bwrap bind roots
|
2026-07-27 00:31:00 +08:00 |
|
|
yu-xin-candXubin Ren
|
2527ce5de9
|
test(exec): cover bwrap sandbox mounts
|
2026-06-30 22:34:43 +08:00 |
|
 primit1v0andXubin Ren
|
ce887772e9
|
fix(sandbox): set HOME inside bwrap
|
2026-06-10 15:50:53 +08:00 |
|
 Xubin Ren
|
9f96be6e9b
|
fix(sandbox): mount media directory read-only inside bwrap sandbox
|
2026-04-05 19:08:38 +00:00 |
|
|
Xubin Ren
|
cef0f3f988
|
refactor: replace podman-seccomp.json with minimal cap_add, harden bwrap, add sandbox tests
|
2026-04-05 19:03:06 +00:00 |
|