Commit Graph

45 Commits

Author SHA1 Message Date
JY Tan
9bb11a2f40 chore: update code template for OpenCode and Gemini CLI (#20) 2026-01-22 15:41:30 -08:00
JY Tan
5b57527a83 fix: filter directory-only Landlock rights for non-directory paths (#17) 2026-01-21 12:35:35 -08:00
JY Tan
5d01a01883 fix: handle files and symlinks correctly in denyRead paths (#14) 2026-01-21 02:26:51 -08:00
priuatus
06c2cc9a34 fix: network namespace detection false negative (#12)
Co-authored-by: netixen <netixen@spaceship>
2026-01-20 11:30:18 -08:00
JY Tan
89301f8c8a Update README.md 2026-01-19 20:45:43 -08:00
JY Tan
5ef2ce5719 Improve docs organization 2026-01-17 16:14:18 -08:00
JY Tan
20fa647ccc feat: support ssh commands (#10) 2026-01-17 15:36:51 -08:00
JY Tan
3c3f28b32c docs: add more information about nested sandboxing and integration test skip behavior 2026-01-17 13:39:03 -08:00
JY Tan
71c211c9ab fix: improve skip logic for Landlock tests in integration_linux_test.go 2026-01-17 13:15:23 -08:00
JY Tan
d53d123fb6 Update README.md 2026-01-15 15:18:35 -08:00
JY Tan
9496f7f0f0 Update README.md 2026-01-15 15:13:12 -08:00
JY Tan
f3ac2d72f4 feat: ability to import claude code settings as configs (#7) 2026-01-15 14:55:44 -08:00
JY Tan
800a50b457 Add support for config inheritance 2026-01-05 17:23:14 -08:00
JY Tan
83fa7a76ee Update templates 2025-12-29 14:45:51 -08:00
JY Tan
90cd0a0a4b Add code-relaxed template, handle wildcard network allow 2025-12-29 01:39:41 -08:00
JY Tan
d8e55d9515 Introduce built-in templates for enhanced configuration options, support JSONC format 2025-12-28 22:16:50 -08:00
JY Tan
8317bb96bc perf: add benchmarks (#5) 2025-12-28 00:38:01 -08:00
JY Tan
6c21e008c3 Handle library usage and missing network namespace gracefully 2025-12-26 16:19:07 -08:00
JY Tan
6fdd1af057 test: add integration and smoke tests (#4) 2025-12-26 14:56:20 -08:00
JY Tan
f86d9a2c82 Add environment sanitization 2025-12-25 20:47:11 -08:00
JY Tan
32d785c703 Remove unnecessary file 2025-12-25 19:20:58 -08:00
JY Tan
47de3e431c Add ability to block commands 2025-12-25 19:03:01 -08:00
JY Tan
6159bdd38a Lint linux files 2025-12-25 18:23:57 -08:00
JY Tan
08ed28f88f Enhance Linux sandbox security features with Landlock, seccomp, and eBPF monitoring 2025-12-25 17:33:55 -08:00
JY Tan
a8158a39b3 Update docs 2025-12-23 20:51:01 -08:00
JY Tan
a65c7ce308 Add install script 2025-12-23 20:31:23 -08:00
JY Tan
dcdfff1fde Update README.md 2025-12-23 18:54:01 -08:00
JY Tan
8db245f56e Refactor and improve documentation, add examples 2025-12-23 18:43:07 -08:00
JY Tan
b98b640f5a Add support for local outbound connections in sandbox configuration 2025-12-22 15:55:01 -08:00
JY Tan
10c571e7d9 Update docs 2025-12-19 21:07:55 -08:00
JY Tan
b16f76e7b7 Enhance filesystem protection in Linux sandbox 2025-12-19 12:27:17 -08:00
JY Tan
b220c42614 Refine log monitoring predicate to filter for specific session violations 2025-12-19 12:24:01 -08:00
JY Tan
34d6e51c4b Add versioning support 2025-12-19 12:22:51 -08:00
JY Tan
299adcae33 Lint tests 2025-12-18 17:58:26 -08:00
JY Tan
2abda47b0a Update README.md 2025-12-18 17:51:04 -08:00
JY Tan
549c504585 Add unit tests 2025-12-18 17:50:04 -08:00
JY Tan
a3a926b970 Update README.md 2025-12-18 17:24:32 -08:00
JY Tan
938c47071d Update README.md 2025-12-18 17:21:00 -08:00
JY Tan
cc031fe176 Minor changes 2025-12-18 17:14:19 -08:00
JY Tan
1a1eaae237 Add SECURITY.md 2025-12-18 17:02:20 -08:00
JY Tan
14a737a36b Lint project 2025-12-18 17:02:09 -08:00
JY Tan
55230dd774 Add GoReleaser configuration, CI workflows, and contributing guidelines; update .gitignore and Makefile 2025-12-18 16:45:12 -08:00
JY Tan
accce04769 Add license 2025-12-18 15:52:08 -08:00
JY Tan
35d1f1ea22 Enhance violation monitoring 2025-12-18 15:49:05 -08:00
JY Tan
c02c91f051 Initial commit 2025-12-18 13:14:41 -08:00