All pull requests

Pull requests

• Read a caller's path as a path where it exists, and let a caller mark one

  #608·ronleizrowice-ant opened Sep 25, 2026Collaborator·

  ·

• linux: a read-deny glob stays in its own tree, and its walk has a budget

  #607·ronleizrowice-ant opened Sep 25, 2026Collaborator·

  ·

• fix(macos): allow the com.apple.netsrc kernel control under network restriction

  #604·v0ropaev opened Sep 24, 2026·

  ·
  1

• cli: --violations writes each recorded violation to a file

  #601·carlostapiacl opened Sep 23, 2026·

  ·
  1

• fix(macos): canonicalize system symlink roots

  #600·sylvesterkaczmarek opened Sep 23, 2026·

  ·
  1

• feat(macos): allowMachRegister, so Chromium can check in its Mach ports

  #598·v0ropaev opened Sep 22, 2026·

  ·
  1

  6

• proxy: tell the sandboxed client which policy denied its connection

  #597·v0ropaev opened Sep 22, 2026·

  ·
  1

• Deny a wrapped command the library's own files

  #595·ronleizrowice-ant opened Sep 21, 2026Collaborator·

  ·

• Take host-side helpers only from where the sandboxed command cannot write

  #594·ronleizrowice-ant opened Sep 21, 2026Collaborator·

  ·

• credentials: source a masked value from a command, not the environment

  #593·tech4242 opened Sep 21, 2026·

  ·

• ci: run the package as an embedder ships it, on musl and on macOS 26

  #592·ronleizrowice-ant opened Sep 21, 2026Collaborator·

  ·

• Per-command network allow lists, and deny reasons from the ask callback

  #591·ronleizrowice-ant opened Sep 21, 2026Collaborator·

  ·

• linux: exit status under zsh, and import zod/v3

  #590·ronleizrowice-ant opened Sep 21, 2026Collaborator·

  ·

• ci: pin ripgrep, Node, type packages and actions, and raise engines to Node 22

  #589·ronleizrowice-ant opened Sep 21, 2026Collaborator·

  ·

• linux: a sandboxed command cannot make user namespaces of its own

  #588·ronleizrowice-ant opened Sep 21, 2026Collaborator·

  ·

• fix(sandbox): deny writes to the loaded settings file within the allowed region

  #587·tech4242 opened Sep 21, 2026·

  ·

• cli: write refused operations to --violations, and start the filesystem monitor for it

  #586·MatheusMartinho opened Sep 21, 2026·

  ·
  1

• linux: a deny set's mounts do not depend on the order it was written in

  #585·ronleizrowice-ant opened Sep 20, 2026Collaborator·

  ·

• linux: a placeholder is removed only when no running sandbox relies on it

  #584·ronleizrowice-ant opened Sep 20, 2026Collaborator·

  ·

• fix: treat absolute paths with [brackets] as literals so denyRead cannot silently fail

  #581·mrchatam opened Sep 20, 2026·

  ·
  1

• linux: one mount per destination, so bubblewrap 0.4 starts

  #580·ronleizrowice-ant opened Sep 20, 2026Collaborator·

  ·

• windows: apply the mandatory write denies (git hooks and config, dangerous dotfiles)

  #579·ronleizrowice-ant opened Sep 20, 2026Collaborator·

  ·

• Document --control-fd, and import the packed package before release

  #578·ronleizrowice-ant opened Sep 20, 2026Collaborator·

  ·

• SRT v0.0.78

  #577·ronleizrowice-ant opened Sep 19, 2026Collaborator·

  ·

• Glob walk: a drive-root base no longer drops the pattern, and three ways a failure could lose a match

  #575·ronleizrowice-ant opened Sep 19, 2026Collaborator·

  ·