aboutgitcodebugslistschat
path: root/passt.c
Commit message (Expand)AuthorAgeFilesLines
* Use typing to reduce chances of IPv4 endianness errorsDavid Gibson2022-11-041-1/+1
* icmp: Don't discard first reply sequence for a given echo ID2022_10_26.f212044Stefano Brivio2022-10-271-0/+3
* isolation: Clarify various self-isolation stepsDavid Gibson2022-10-151-5/+3
* log, conf: Add support for logging to fileStefano Brivio2022-10-141-0/+1
* Move logging functions to a new file, log.cStefano Brivio2022-10-141-0/+1
* cppcheck: Suppress same-value-in-ternary branches warningDavid Gibson2022-09-291-0/+1
* Catch failures when installing signal handlersDavid Gibson2022-09-291-2/+4
* Handle userns isolation and dropping root at the same timeDavid Gibson2022-09-131-1/+2
* Move self-isolation code into a separate fileDavid Gibson2022-09-131-112/+1
* Don't unnecessarily avoid CLOEXEC flags2022_08_24.60ffc5bDavid Gibson2022-08-241-4/+2
* Make substructures for IPv4 and IPv6 specific context informationDavid Gibson2022-07-301-1/+1
* Separate IPv4 and IPv6 configurationDavid Gibson2022-07-301-2/+2
* passt: Truncate PID file on open()Stefano Brivio2022-07-221-1/+1
* passt: Allow exit_group() system call in seccomp profilesStefano Brivio2022-07-141-0/+2
* arch, passt: Use executable link to form AVX2 binary pathStefano Brivio2022-07-141-3/+6
* conf: Add --runas option, changing to given UID and GID if started as rootStefano Brivio2022-05-191-46/+0
* conf, tcp, udp: Allow address specification for forwarded portsStefano Brivio2022-05-011-11/+11
* passt: Improper use of negative value (CWE-394)Stefano Brivio2022-04-071-5/+14
* passt: Ignoring number of bytes read, CWE-252Stefano Brivio2022-04-051-2/+3
* passt: Accurate error reporting for sandbox()Stefano Brivio2022-03-291-10/+26
* treewide: Fix android-cloexec-* clang-tidy warnings, re-enable checksStefano Brivio2022-03-291-4/+5
* treewide: Mark constant references as constStefano Brivio2022-03-291-7/+7
* tcp_splice: Close sockets right away on high number of open filesStefano Brivio2022-03-291-1/+1
* tcp: Rework timers to use timerfd instead of periodic bitmap scanStefano Brivio2022-03-291-4/+8
* tcp: Refactor to use events instead of states, split out spliced implementationStefano Brivio2022-03-281-2/+2
* conf, util, tap: Implement --trace option for extra verbose loggingStefano Brivio2022-03-251-1/+2
* passt, pasta: Run-time selection of AVX2 buildStefano Brivio2022-02-281-0/+3
* seccomp: Adjust list of allowed syscalls for armv6l, armv7lStefano Brivio2022-02-261-3/+5
* passt: Don't warn on failed madvise()Stefano Brivio2022-02-261-2/+1
* passt: Explicitly check return value of chdir()Stefano Brivio2022-02-251-1/+3
* passt: Drop PASST_LEGACY_NO_OPTIONS sectionsStefano Brivio2022-02-221-2/+0
* pasta: By default, quit if filesystem-bound net namespace goes awayStefano Brivio2022-02-211-1/+6
* Makefile, conf, passt: Drop passt4netns references, explicit argc checkStefano Brivio2022-02-211-2/+7
* passt: Make process not dumpable after sandboxingStefano Brivio2022-02-211-0/+2
* passt, pasta: Namespace-based sandboxing, defer seccomp policy applicationStefano Brivio2022-02-211-47/+79
* passt, tap: Daemonise once socket is ready without waiting for connectionStefano Brivio2022-01-281-2/+4
* seccomp: Add a number of alternate and per-arch syscallsStefano Brivio2022-01-261-5/+9
* Makefile, seccomp: Fix build for i386, ppc64, ppc64leStefano Brivio2022-01-261-1/+1
* passt: Drop <linux/ipv6.h> include, carry own ipv6hdr and opt_hdr definitionsStefano Brivio2022-01-261-1/+0
* seccomp: Add newfstatat to list of allowed syscallsStefano Brivio2021-10-211-1/+1
* passt: Fork into background also if not running from a terminalStefano Brivio2021-10-211-1/+1
* passt: Add cppcheck target, test, and address resulting warningsStefano Brivio2021-10-211-3/+1
* passt: Fix build with gcc 7, use std=c99, enable some more Clang checkersStefano Brivio2021-10-211-18/+15
* passt: Address gcc 11 warningsStefano Brivio2021-10-201-4/+9
* passt: Include linux/seccomp.h and linux/audit.h instead of seccomp.hStefano Brivio2021-10-191-1/+2
* passt: Add clock_gettime to list of allowed syscallsStefano Brivio2021-10-161-0/+1
* passt: Static builds: don't redefine __vsyslog(), skip getpwnam() and initgro...Stefano Brivio2021-10-161-5/+10
* passt: Check if a PID file was actually requested before creating itStefano Brivio2021-10-151-1/+1
* passt: Don't refuse to run if UID is 0 in non-init namespaceStefano Brivio2021-10-141-1/+14
* conf: Add -P, --pid, to specify a file where own PID is written toStefano Brivio2021-10-141-1/+24