tester/src/main.c, branch v0.3.5 [no description] Try bind-mount /tmp into sandbox when it's not a separate filesystem 2026-01-16T21:20:52+00:00 Roman Smrž roman.smrz@seznam.cz 2026-01-16T19:50:38+00:00 2262c926ceeecd93df0d663821e399d5a74297e3 






Detach original read-write root filesystem from /run/old_root
2026-01-11T16:19:21+00:00

Roman Smrž
roman.smrz@seznam.cz

2026-01-11T16:19:21+00:00

11894ca067981b44a1c17612b8d85144d71f30a3












Isolate filesystems using mount namespace
2025-07-06T11:03:19+00:00

Roman Smrž
roman.smrz@seznam.cz

2025-07-05T16:15:06+00:00

28a93e24f6a33a8254c16c31961d523c71bdb1d2

Recursively bind and set to read-only all the host filesystems and
bind-mount as read-write only the test dir. Provide new writable tmpfs
under /tmp.

Changelog: Make host filesystems read-only for the test process (except for test dir)





Recursively bind and set to read-only all the host filesystems and
bind-mount as read-write only the test dir. Provide new writable tmpfs
under /tmp.

Changelog: Make host filesystems read-only for the test process (except for test dir)







Custom C main instead of wrapper binary
2024-10-14T18:52:21+00:00

Roman Smrž
roman.smrz@seznam.cz

2024-10-13T14:50:13+00:00

0c8bad166577f9973ba5701aee5ca5d9a3f3bc5d

Changelog: Use custom C main instead of wrapper binary for unshare(2) call.





Changelog: Use custom C main instead of wrapper binary for unshare(2) call.