This repository has been archived on 2026-03-13. You can view files and clone it. You cannot open issues or pull requests or push a commit.

JY Tan 8630789c39 Add TODO comment

2026-02-02 11:53:40 -08:00

..

benchmark_test.go

perf: add benchmarks (#5)

2025-12-28 00:38:01 -08:00

command_test.go

feat: support ssh commands (#10)

2026-01-17 15:36:51 -08:00

command.go

feat: support ssh commands (#10)

2026-01-17 15:36:51 -08:00

dangerous_test.go

Add unit tests

2025-12-18 17:50:04 -08:00

dangerous.go

feat: add defaultDenyRead mode for strict filesystem isolation (#24)

2026-02-01 15:11:40 -08:00

integration_linux_test.go

test: add denyRead integration tests for files and directories (#15)

2026-01-23 10:22:17 -08:00

integration_macos_test.go

test: add integration and smoke tests (#4)

2025-12-26 14:56:20 -08:00

integration_test.go

test: add denyRead integration tests for files and directories (#15)

2026-01-23 10:22:17 -08:00

linux_ebpf_stub.go

Add environment sanitization

2025-12-25 20:47:11 -08:00

linux_ebpf.go

Add environment sanitization

2025-12-25 20:47:11 -08:00

linux_features_stub.go

Handle library usage and missing network namespace gracefully

2025-12-26 16:19:07 -08:00

linux_features.go

fix: network namespace detection false negative (#12)

2026-01-20 11:30:18 -08:00

linux_landlock_stub.go

Add environment sanitization

2025-12-25 20:47:11 -08:00

linux_landlock.go

fix: filter directory-only Landlock rights for non-directory paths (#17)

2026-01-21 12:35:35 -08:00

linux_seccomp_stub.go

Add environment sanitization

2025-12-25 20:47:11 -08:00

linux_seccomp.go

Add environment sanitization

2025-12-25 20:47:11 -08:00

linux_stub.go

Enhance Linux sandbox security features with Landlock, seccomp, and eBPF monitoring

2025-12-25 17:33:55 -08:00

linux_test.go

Add code-relaxed template, handle wildcard network allow

2025-12-29 01:39:41 -08:00

linux.go

Add TODO comment

2026-02-02 11:53:40 -08:00

macos_test.go

feat: add defaultDenyRead mode for strict filesystem isolation (#24)

2026-02-01 15:11:40 -08:00

macos.go

feat: add defaultDenyRead mode for strict filesystem isolation (#24)

2026-02-01 15:11:40 -08:00

manager.go

Handle library usage and missing network namespace gracefully

2025-12-26 16:19:07 -08:00

monitor.go

Add environment sanitization

2025-12-25 20:47:11 -08:00

sanitize_test.go

Add environment sanitization

2025-12-25 20:47:11 -08:00

sanitize.go

Add environment sanitization

2025-12-25 20:47:11 -08:00

shell.go

Add environment sanitization

2025-12-25 20:47:11 -08:00

utils_test.go

Add unit tests

2025-12-18 17:50:04 -08:00

utils.go

Lint project

2025-12-18 17:02:09 -08:00