Commits

Branch selector

 main

User selector

ChrysoliteAzalea

Datepicker

All time

Commit History

Commits on Oct 23, 2023

• Block the "open_by_handle_at" system call

  

  ChrysoliteAzalea

  authored and

  aleasto

  committed
  782dd7b

  Copy full SHA for 782dd7b

Commits on Sep 11, 2023

• Allow local amendments to the AppArmor policy

  

  ChrysoliteAzalea

  authored and

  aleasto

  committed
  0f7c1ea

  Copy full SHA for 0f7c1ea

Commits on Jul 22, 2023

• Allow running a shell command as an arbitrary user and group and with an arbitrary security context (#996)

  ChrysoliteAzalea

  authored
  91b8a0f

  Copy full SHA for 91b8a0f

Commits on Mar 19, 2023

• All AppArmor profiles have been switched to the "enforce" mode.

  

  ChrysoliteAzalea

  authored and

  aleasto

  committed
  819bfa0

  Copy full SHA for 819bfa0

Commits on Nov 18, 2022

• * Makefile adjustments

  Show description for da599d3
  

  ChrysoliteAzalea

  authored and

  aleasto

  committed
  da599d3

  Copy full SHA for da599d3

• AppArmor policy setup has been moved to the Makefile

  

  ChrysoliteAzalea

  authored and

  aleasto

  committed
  ad285f3

  Copy full SHA for ad285f3

• Policies have been adjusted for Android 11.

  

  ChrysoliteAzalea

  authored and

  aleasto

  committed
  d26e47b

  Copy full SHA for d26e47b

• Temporarily switching all profiles to "complain" mode in order to work out policy mistakes.

  

  ChrysoliteAzalea

  authored and

  aleasto

  committed
  8a66de6

  Copy full SHA for 8a66de6

• Adding AppArmor profiles for the container.

  

  ChrysoliteAzalea

  authored and

  aleasto

  committed
  0b73886

  Copy full SHA for 0b73886

Commits on Oct 31, 2022

• Mount proc with the hidepid=2 option

  

  ChrysoliteAzalea

  authored and

  aleasto

  committed
  f5543df

  Copy full SHA for f5543df

• Remove CAP_SYS_MODULE from the capability bounding set.

  

  ChrysoliteAzalea

  authored and

  aleasto

  committed
  883fc4e

  Copy full SHA for 883fc4e

Commits on Sep 6, 2022

• A seccomp profile for the entire container has been added.

  

  ChrysoliteAzalea

  authored and

  aleasto

  committed
  7046fb2

  Copy full SHA for 7046fb2

• Container capabilities have been restricted.

  

  ChrysoliteAzalea

  authored and

  aleasto

  committed
  2c63dbf

  Copy full SHA for 2c63dbf

• A "No New Privileges" has been enabled for the container.

  

  ChrysoliteAzalea

  authored and

  aleasto

  committed
  abef133

  Copy full SHA for abef133