All pull requests

Pull requests

• A deny keeps the symbolic links on the way to it in place

  #693·ronleizrowice-ant opened Oct 10, 2026Collaborator·

  ·

• Linux: a matching link kept under its own spelling stays in the deny list

  #690·ronleizrowice-ant opened Oct 10, 2026Collaborator·

  ·

• The real path is the kernel's on every runtime

  #689·ronleizrowice-ant opened Oct 10, 2026Collaborator·

  ·

• linux: no placeholder where no mount point can be made

  #688·ronleizrowice-ant opened Oct 10, 2026Collaborator·

  ·

• Read brackets that spell no set of characters as text, so no path entry keeps a sandbox from starting

  #687·ronleizrowice-ant opened Oct 10, 2026Collaborator·

  ·

• windows: deny entries rank as on the other platforms

  #686·ronleizrowice-ant opened Oct 10, 2026Collaborator·

  ·

• A certificate's serial number never begins with a zero byte

  #685·ronleizrowice-ant opened Oct 10, 2026Collaborator·

  ·
  1

• linux: bind a write deny that holds an allowed write path

  #684·ronleizrowice-ant opened Oct 10, 2026Collaborator·

  ·

• Ask the file system for the real path of a name that holds a backslash

  #683·ronleizrowice-ant opened Oct 10, 2026Collaborator·

  ·

• fix: coordinate sandbox startup, reset, and failure cleanup

  #677·Tunaycel opened Oct 8, 2026·

  ·

• fix: compare repeated filesystem path entries consistently

  #676·Tunaycel opened Oct 8, 2026·

  ·

• Release v0.0.80

  #664·ronleizrowice-ant opened Oct 7, 2026Collaborator·

  ·

• windows: let the sandbox user stat the folders above a granted path

  #661·karljamoralin opened Oct 7, 2026·

  ·

• linux: quote the socat socket addresses

  #659·v0ropaev opened Oct 6, 2026·

  ·
  1

• Run Windows session ACL operations asynchronously

  #651·sylvesterkaczmarek opened Oct 4, 2026·

  ·
  1

  1

• windows: srt-win exec passes the caller's stdin through to the sandboxed child

  #648·karljamoralin opened Oct 3, 2026·

  ·
  1

• feat(macos): allow configurable IOKit registry entry and user client classes

  #641·swaraj792725 opened Oct 1, 2026·

  ·
  1

• Upgrade to MXC 0.9.0

  #640·shschaefer opened Oct 1, 2026·

  ·

• fix(cli): propagate child signal termination status and exit code

  #635·swaraj792725 opened Sep 30, 2026·

  ·
  1

• fix(sandbox): allow seccompConfig in checkDependencies and checkDependenciesAsync

  #634·swaraj792725 opened Sep 30, 2026·

  ·
  1

• checkDependencies: accept a seccompConfig, like ripgrepConfig

  #633·jayzuccarelli opened Sep 30, 2026·

  ·
  1

  1

• fix(sandbox): quote UNIX-CONNECT socket addresses in linux sandbox command

  #625·swaraj792725 opened Sep 29, 2026·

  ·
  2

• Draft, not for merging: every ready fix merged together

  #624·ronleizrowice-ant opened Sep 29, 2026Collaborator·

  ·

• macos: re-emit a literal read deny that a glob allow reaches into

  #619·v0ropaev opened Sep 28, 2026·

  ·

• linux: with no seccomp helper, have bubblewrap disable user namespaces

  #617·ronleizrowice-ant opened Sep 28, 2026Collaborator·

  ·