summaryrefslogtreecommitdiff
path: root/pasta.c
AgeCommit message (Expand)Author
2023-04-06passt: Relicense to GPL 2.0, or any later versionStefano Brivio
2023-02-16convert all remaining err() followed by exit() to die()Laine Stump
2023-02-12pasta: propagate exit code from child commandPaul Holzinger
2023-02-12pasta: correctly exit when execvp() failsPaul Holzinger
2023-02-12pasta: Wait for tap to be set up before spawning commandStefano Brivio
2022-11-16util, pasta: Add do_clone() wrapper around __clone2() and clone()Stefano Brivio
2022-11-04Minor improvements to IPv4 netmask handlingDavid Gibson
2022-10-15Rename pasta_setup_ns() to pasta_spawn_cmd()David Gibson
2022-10-15isolation: Only configure UID/GID mappings in userns when spawning shellDavid Gibson
2022-10-15Replace FWRITE with a functionDavid Gibson
2022-10-15Remove unhelpful drop_caps() call in pasta_start_ns()David Gibson
2022-10-15pasta_start_ns() always ends in parent contextDavid Gibson
2022-10-15pasta: More general way of starting spawned shell as a login shellDavid Gibson
2022-10-14Move logging functions to a new file, log.cStefano Brivio
2022-09-29clang-tidy: Fix spurious null pointer warning in pasta_start_ns()David Gibson
2022-09-13Handle userns isolation and dropping root at the same timeDavid Gibson
2022-09-13Correctly handle --netns-only in pasta_start_ns()David Gibson
2022-09-13Clean up and rename conf_ns_open()David Gibson
2022-09-13Move self-isolation code into a separate fileDavid Gibson
2022-08-30Allow pasta to take a command to executeDavid Gibson
2022-08-24Don't unnecessarily avoid CLOEXEC flags2022_08_24.60ffc5bDavid Gibson
2022-07-30Make substructures for IPv4 and IPv6 specific context informationDavid Gibson
2022-07-30Separate IPv4 and IPv6 configurationDavid Gibson
2022-04-07treewide: Argument cannot be negative, CWE-687Stefano Brivio
2022-03-29treewide: Fix android-cloexec-* clang-tidy warnings, re-enable checksStefano Brivio
2022-02-26seccomp: Adjust list of allowed syscalls for armv6l, armv7lStefano Brivio
2022-02-21pasta: By default, quit if filesystem-bound net namespace goes awayStefano Brivio
2022-02-21passt, pasta: Namespace-based sandboxing, defer seccomp policy applicationStefano Brivio
2022-01-26seccomp: Add a number of alternate and per-arch syscallsStefano Brivio
2022-01-26pasta: Check for zero d_reclen returned by getdents64() syscallStefano Brivio
2022-01-26conf, pasta: Explicitly pass CLONE_{NEWUSER,NEWNET} to setns()Stefano Brivio
2022-01-26passt: Drop <linux/ipv6.h> include, carry own ipv6hdr and opt_hdr definitionsStefano Brivio
2021-10-21passt: Add cppcheck target, test, and address resulting warningsStefano Brivio
2021-10-21passt: Fix build with gcc 7, use std=c99, enable some more Clang checkersStefano Brivio
2021-10-20passt: Add clang-tidy Makefile target and test, take care of warningsStefano Brivio
2021-10-20passt: Address gcc 11 warningsStefano Brivio
2021-10-19netlink, conf: Actually get prefix/mask lengthStefano Brivio
2021-10-14pasta: Allow nanosleep(2) and clock_nanosleep(2) syscalls tooStefano Brivio
2021-10-14netlink, pasta: Configure MTU of tap interface on --config-netStefano Brivio
2021-10-14passt, pasta: Completely avoid dynamic memory allocationStefano Brivio