aboutgitcodebugslistschat
path: root/passt.c
Commit message (Expand)AuthorAgeFilesLines
...
* passt: Ignoring number of bytes read, CWE-252Stefano Brivio2022-04-051-2/+3
* passt: Accurate error reporting for sandbox()Stefano Brivio2022-03-291-10/+26
* treewide: Fix android-cloexec-* clang-tidy warnings, re-enable checksStefano Brivio2022-03-291-4/+5
* treewide: Mark constant references as constStefano Brivio2022-03-291-7/+7
* tcp_splice: Close sockets right away on high number of open filesStefano Brivio2022-03-291-1/+1
* tcp: Rework timers to use timerfd instead of periodic bitmap scanStefano Brivio2022-03-291-4/+8
* tcp: Refactor to use events instead of states, split out spliced implementationStefano Brivio2022-03-281-2/+2
* conf, util, tap: Implement --trace option for extra verbose loggingStefano Brivio2022-03-251-1/+2
* passt, pasta: Run-time selection of AVX2 buildStefano Brivio2022-02-281-0/+3
* seccomp: Adjust list of allowed syscalls for armv6l, armv7lStefano Brivio2022-02-261-3/+5
* passt: Don't warn on failed madvise()Stefano Brivio2022-02-261-2/+1
* passt: Explicitly check return value of chdir()Stefano Brivio2022-02-251-1/+3
* passt: Drop PASST_LEGACY_NO_OPTIONS sectionsStefano Brivio2022-02-221-2/+0
* pasta: By default, quit if filesystem-bound net namespace goes awayStefano Brivio2022-02-211-1/+6
* Makefile, conf, passt: Drop passt4netns references, explicit argc checkStefano Brivio2022-02-211-2/+7
* passt: Make process not dumpable after sandboxingStefano Brivio2022-02-211-0/+2
* passt, pasta: Namespace-based sandboxing, defer seccomp policy applicationStefano Brivio2022-02-211-47/+79
* passt, tap: Daemonise once socket is ready without waiting for connectionStefano Brivio2022-01-281-2/+4
* seccomp: Add a number of alternate and per-arch syscallsStefano Brivio2022-01-261-5/+9
* Makefile, seccomp: Fix build for i386, ppc64, ppc64leStefano Brivio2022-01-261-1/+1
* passt: Drop <linux/ipv6.h> include, carry own ipv6hdr and opt_hdr definitionsStefano Brivio2022-01-261-1/+0
* seccomp: Add newfstatat to list of allowed syscallsStefano Brivio2021-10-211-1/+1
* passt: Fork into background also if not running from a terminalStefano Brivio2021-10-211-1/+1
* passt: Add cppcheck target, test, and address resulting warningsStefano Brivio2021-10-211-3/+1
* passt: Fix build with gcc 7, use std=c99, enable some more Clang checkersStefano Brivio2021-10-211-18/+15
* passt: Address gcc 11 warningsStefano Brivio2021-10-201-4/+9
* passt: Include linux/seccomp.h and linux/audit.h instead of seccomp.hStefano Brivio2021-10-191-1/+2
* passt: Add clock_gettime to list of allowed syscallsStefano Brivio2021-10-161-0/+1
* passt: Static builds: don't redefine __vsyslog(), skip getpwnam() and initgro...Stefano Brivio2021-10-161-5/+10
* passt: Check if a PID file was actually requested before creating itStefano Brivio2021-10-151-1/+1
* passt: Don't refuse to run if UID is 0 in non-init namespaceStefano Brivio2021-10-141-1/+14
* conf: Add -P, --pid, to specify a file where own PID is written toStefano Brivio2021-10-141-1/+24
* passt: Warn if we're running as root, abort if we can't change to nobody:nobodyStefano Brivio2021-10-141-0/+29
* passt: Drop all capabilities that we might have, except for CAP_NET_BIND_SERVICEStefano Brivio2021-10-141-0/+18
* passt, pasta: Completely avoid dynamic memory allocationStefano Brivio2021-10-141-8/+8
* passt, pasta: Add seccomp supportStefano Brivio2021-10-141-0/+36
* conf, tap: Split netlink and pasta functions, allow interface configurationStefano Brivio2021-10-141-181/+2
* pasta: Add second waitid() in pasta_child_handler()Stefano Brivio2021-10-071-0/+1
* pasta: Allow specifying paths and names of namespacesGiuseppe Scrivano2021-10-071-20/+39
* passt: Shrink binary size by dropping static initialisersStefano Brivio2021-10-051-2/+6
* tcp, tap: Turn tcp_probe_mem() into sock_probe_mem(), use for AF_UNIX socket tooStefano Brivio2021-10-051-0/+1
* passt: Add handler for optional deferred tasksStefano Brivio2021-10-051-20/+26
* passt: Actually initialise timers for protocol handlersStefano Brivio2021-09-271-2/+16
* passt: Align pkt_buf to PAGE_SIZE (start and size), try to fit in huge pagesStefano Brivio2021-09-271-2/+6
* pasta: Clean up namespace processes on exit, reap zombies from clone()Stefano Brivio2021-09-151-9/+83
* pasta: Set ping_group_range upon namespace creationStefano Brivio2021-09-091-0/+4
* passt: Add epoll event indication and passt/pasta mode in socket debug messageStefano Brivio2021-09-091-1/+3
* pasta: If a new namespace is created, wait for it to be ready before proceedingStefano Brivio2021-09-011-1/+15
* passt, pasta: Introduce command-line options and port re-mappingStefano Brivio2021-09-011-423/+101
* tcp: Introduce scatter-gather IO path from socket to tapStefano Brivio2021-07-261-0/+1