Repository navigation

All pull requests

Labels (7)Milestones (0)New pull request

Open

(49)

Closed

(166)

caps: bounds-check accesses to the capability sets
#386b84330808 opened Nov 4, 2026
unotify: decode tracee memory only within the bytes actually copied
#384b84330808 opened Nov 3, 2026
nstun: bound FIN flow idle lifetime and correct FIN retransmissions
#383botegalucas opened Nov 3, 2026
1
mnt: fail closed on untrusted workdir candidates
#381krishna28238-arch opened Oct 30, 2026
nstun: cap aggregate host-to-guest TCP buffering
#380PedroACFerreira opened Oct 29, 2026
1
nsjail: close fds when pipe() fails in listen mode
#379immanuwell opened Oct 29, 2026
Add an opt-in x86_64 CLI seccomp policy restricting nested user namespaces
#378Matan1986 opened Oct 29, 2026
1
kafel: update submodule to include the 64-bit argument word order fix
#377Arielpoghon opened Oct 26, 2026
1
configs: block io_uring in remaining seccomp denylist examples
#376czuba92-pixel opened Oct 25, 2026
1
nstun: reject unspecified IPv4 guest sources
#368AdemVessell opened Oct 22, 2026
cgroup: cap RAM when only cgroup_mem_memsw_max is set
#367ilyas-mallah opened Oct 21, 2026
1
nstun: add a bounds-checked reader for IP parsing
#366agusgarcia3007 opened Oct 19, 2026
1
net, contain: run under gVisor (skip an unused link cache, tolerate a no-op RLIMIT_MSGQUEUE EPERM)
#365rubenfiszel opened Oct 18, 2026
2
nstun: drain TCP listener at flow capacity
#364elnadym165 opened Oct 13, 2026
1
pid: fail closed when dummy init setup fails
#363ikeago opened Oct 12, 2026
1
nstun: enforce REDIRECT selectors on inbound traffic
#362paulchum opened Oct 11, 2026
1
Open seccomp policy file with O_NOFOLLOW
#361kalt2212 opened Oct 10, 2026Contributor
2
security: ensure ro mounts are propagated to submounts
#358Matir opened Oct 7, 2026Member
nstun: drop IPv4 multicast destinations
#354g0w6y opened Oct 1, 2026Contributor
2
subproc: mark supervisor fds CLOEXEC before helper exec
#351ManoharPaturi opened Sep 27, 2026
4
[logs] finish writing log messages on short writes
#350ManoharPaturi opened Sep 27, 2026
3
[net] close the listening socket on setup failure and open sockets CLOEXEC
#349ManoharPaturi opened Sep 27, 2026
3
[cgroup] fix uint32 overflow in CPU quota computation
#348ManoharPaturi opened Sep 27, 2026
3
mnt: retry read-only remounts on EBUSY
#347HanziJiang opened Sep 23, 2026
cgroup2: harden subtree controller detection and add O_CLOEXEC
#346filtede98 opened Sep 23, 2026

Pull requests