Linux Container Development
 help / color / mirror / Atom feed
 messages from 2020-09-24 08:07:39 to 2020-10-19 20:07:15 UTC [more...]

LPC 2020 Hackroom Session: summary and next steps for isolated user namespaces
 2020-10-19 20:07 UTC  (19+ messages)
        ` The problem of setgroups and containers
          ` [RFC][PATCH] userns: Limit process in a user namespace to what the creator is allowed

[PATCH v2 0/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC
 2020-10-19 10:26 UTC  (3+ messages)
` [PATCH v2 1/2] "
` [PATCH v2 2/2] selftests: add tests for CLOSE_RANGE_CLOEXEC

[RFC PATCH 00/30] ima: Introduce IMA namespace
 2020-10-19  9:30 UTC  (5+ messages)

For review: seccomp_user_notif(2) manual page
 2020-10-17  0:25 UTC  (31+ messages)

[PATCH 0/2] fs, close_range: add flag CLOSE_RANGE_CLOEXEC
 2020-10-13 22:45 UTC  (11+ messages)
` [PATCH 1/2] "
` [PATCH 2/2] selftests: add tests for CLOSE_RANGE_CLOEXEC

[RFC PATCH seccomp 0/2] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls
 2020-10-13  0:31 UTC  (100+ messages)
` [PATCH seccomp 0/6] "
  ` [PATCH seccomp 1/6] seccomp: Move config option SECCOMP to arch/Kconfig
  ` [PATCH seccomp 2/6] asm/syscall.h: Add syscall_arches[] array
  ` [PATCH seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent
  ` [PATCH seccomp 4/6] seccomp/cache: Lookup syscall allowlist for fast path
  ` [PATCH seccomp 5/6] selftests/seccomp: Compare bitmap vs filter overhead
  ` [PATCH seccomp 6/6] seccomp/cache: Report cache data through /proc/pid/seccomp_cache
  ` [PATCH v2 seccomp 0/6] seccomp: Add bitmap cache of arg-independent filter results that allow syscalls
    ` [PATCH v2 seccomp 1/6] seccomp: Move config option SECCOMP to arch/Kconfig
    ` [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array
    ` [PATCH v2 seccomp 3/6] seccomp/cache: Add "emulator" to check if filter is arg-dependent
    ` [PATCH v2 seccomp 4/6] seccomp/cache: Lookup syscall allowlist for fast path
    ` [PATCH v2 seccomp 5/6] selftests/seccomp: Compare bitmap vs filter overhead
    ` [PATCH v2 seccomp 6/6] seccomp/cache: Report cache data through /proc/pid/seccomp_cache
` [PATCH v3 seccomp 0/5] seccomp: Add bitmap cache of constant allow filter results
  ` [PATCH v3 seccomp 1/5] x86: Enable seccomp architecture tracking
  ` [PATCH v3 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow
  ` [PATCH v3 seccomp 3/5] seccomp/cache: Lookup syscall allowlist for fast path
  ` [PATCH v3 seccomp 4/5] selftests/seccomp: Compare bitmap vs filter overhead
  ` [PATCH v3 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache
  ` [PATCH v4 seccomp 0/5] seccomp: Add bitmap cache of constant allow filter results
    ` [PATCH v4 seccomp 1/5] seccomp/cache: Lookup syscall allowlist bitmap for fast path
    ` [PATCH v4 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow
    ` [PATCH v4 seccomp 3/5] x86: Enable seccomp architecture tracking
    ` [PATCH v4 seccomp 4/5] selftests/seccomp: Compare bitmap vs filter overhead
    ` [PATCH v4 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache
    ` [PATCH v5 seccomp 0/5]seccomp: Add bitmap cache of constant allow filter results
      ` [PATCH v5 seccomp 1/5] seccomp/cache: Lookup syscall allowlist bitmap for fast path
      ` [PATCH v5 seccomp 2/5] seccomp/cache: Add "emulator" to check if filter is constant allow
      ` [PATCH v5 seccomp 3/5] x86: Enable seccomp architecture tracking
      ` [PATCH v5 seccomp 4/5] selftests/seccomp: Compare bitmap vs filter overhead
      ` [PATCH v5 seccomp 5/5] seccomp/cache: Report cache data through /proc/pid/seccomp_cache

[PATCH] openat2: reject RESOLVE_BENEATH|RESOLVE_IN_ROOT
 2020-10-09 11:50 UTC  (2+ messages)

[PATCH ghak90 V9 06/13] audit: add contid support for signalling the audit daemon
 2020-10-06 20:03 UTC  (3+ messages)
        ` [PATCH ghak90 V9 05/13] audit: log container info of syscalls
        ` [PATCH ghak90 V9 11/13] audit: contid check descendancy and nesting

[PATCH v1 0/6] seccomp: Implement constant action bitmaps
 2020-09-28 20:16 UTC  (29+ messages)
` [PATCH 3/6] "
` [PATCH 4/6] seccomp: Emulate basic filters for constant action results

[RFC PATCH seccomp 2/2] seccomp/cache: Cache filter results that allow syscalls
 2020-09-25 16:39 UTC  (9+ messages)
` [PATCH v2 seccomp 2/6] asm/syscall.h: Add syscall_arches[] array

Use cases for multiple uid mapping?
 2020-09-25  8:13 UTC  (5+ messages)


This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox