1. 18 Dec, 2019 1 commit
  2. 16 Dec, 2019 1 commit
  3. 15 Dec, 2019 5 commits
  4. 08 Dec, 2019 1 commit
  5. 02 Dec, 2019 2 commits
  6. 01 Dec, 2019 1 commit
  7. 30 Nov, 2019 5 commits
  8. 27 Nov, 2019 1 commit
  9. 26 Nov, 2019 2 commits
  10. 25 Nov, 2019 1 commit
  11. 17 Oct, 2019 2 commits
  12. 13 Oct, 2019 1 commit
    • jvoisin's avatar
      Copy file permissions · 4034cf9a
      jvoisin authored
      Mat2 (the cli) will now copy the input file permissions
      to the output file.
      4034cf9a
  13. 12 Oct, 2019 7 commits
  14. 05 Oct, 2019 1 commit
    • madaidan's avatar
      Mount a new tmpfs on /tmp and drop all capabilities · 58773088
      madaidan authored and jvoisin's avatar jvoisin committed
      This mounts a new tmpfs on /tmp so any files residing there would be hidden
      from the sandbox. Many programs store some files in there that might be useful
      to an attacker.  It also drops all capabilities incase it is ever run with
      extra capabilities for whatever reason.
      58773088
  15. 21 Sep, 2019 1 commit
    • jvoisin's avatar
      Fix bubblewrap · 37145531
      jvoisin authored
      On some machines (like mine), `/proc` has to be mounted.  Also, since
      sandboxing with bubblewrap is best effort and assumes that an attacker doesn't
      have control outside of the file to clean, it's safe to __try__ to enable some
      bubblewrap features, and to silently fail otherwise.
      37145531
  16. 01 Sep, 2019 5 commits
  17. 31 Aug, 2019 1 commit
  18. 01 Aug, 2019 1 commit
  19. 22 Jul, 2019 1 commit
    • jvoisin's avatar
      Tweak a bit the ci · 49e0c43a
      jvoisin authored
      - gentoo and debian with bubblewrap are not allowed to fail anymore
      - don't run coverage on debian without bubblewrap
      49e0c43a