{"push_id":2862180045,"size":6,"distinct_size":1,"ref":"refs/heads/master","head":"7c8419935b92271d48cadb384a525d00773bb9ca","before":"9f7ff998a4f9ab719bc2866a4daac2646bfc4285","commits":[{"sha":"bb5f2cb9f6f956d61ed075f0c77258cb9380f2be","author":{"name":"Wolf480pl","email":"d283c56143493e7ce848d5a2ee98e220f5f0ec38@interia.pl"},"message":"Fix mode checking in `open` syscall filter\n\nThe syscall filter for open(2) checks that the mode & O_RDWR == 0.\nLooks like someone assumed that O_RDWR == O_WRONLY | O_RDONLY,\nwhich is not the case.\nIn fact O_WRONLY & O_RDWR == 0, which means the filter allows opening\nfiles WRONLY. This is wrong.\n\nFix it by changing the check to mode & (O_RDWR | O_WRONLY) == 0","distinct":false,"url":"https://api.github.com/repos/sio2project/sio2jail/commits/bb5f2cb9f6f956d61ed075f0c77258cb9380f2be"},{"sha":"3687722e62b309ac377373e4131527c088a98afe","author":{"name":"Wolf480pl","email":"d283c56143493e7ce848d5a2ee98e220f5f0ec38@interia.pl"},"message":"Add missing filesystem syscalls to the policy","distinct":false,"url":"https://api.github.com/repos/sio2project/sio2jail/commits/3687722e62b309ac377373e4131527c088a98afe"},{"sha":"75b6a52cb76533e02c9423243dadc338f3bfdfbb","author":{"name":"Wolf480pl","email":"d283c56143493e7ce848d5a2ee98e220f5f0ec38@interia.pl"},"message":"Fix bind mount flags\n\nWhen creating a bind-mount, flags like MS_RDONLY or MS_NODEV are ignored.\nStop specifying them there, and instead remount the bind-mount right\nafter creating it, to add the necessary flags.","distinct":false,"url":"https://api.github.com/repos/sio2project/sio2jail/commits/75b6a52cb76533e02c9423243dadc338f3bfdfbb"},{"sha":"ec27794ad158349fae9fc0a7d81bcd6ecdfc9c4f","author":{"name":"Wolf480pl","email":"d283c56143493e7ce848d5a2ee98e220f5f0ec38@interia.pl"},"message":"Don't kill supervised program after a harmless signal\n\nSome signals, like SIGCHLD or SIGWINCH, when not handled by the program,\nare ignored by default. Treat those signals as handled by the program\nwhen determining whether if we should kill it from outside.","distinct":false,"url":"https://api.github.com/repos/sio2project/sio2jail/commits/ec27794ad158349fae9fc0a7d81bcd6ecdfc9c4f"},{"sha":"c941712314870a4555eeeeca44156b86e6a812b9","author":{"name":"Wolf480pl","email":"d283c56143493e7ce848d5a2ee98e220f5f0ec38@interia.pl"},"message":"Add option to bind-mount a device file\n\nIn bind mount specification, if theres \",dev\" after mode specifier,\nbind the file without MS_NODEV flag.\n\nThis is useful for bind-mounting devices like /dev/zero or /dev/urandom","distinct":false,"url":"https://api.github.com/repos/sio2project/sio2jail/commits/c941712314870a4555eeeeca44156b86e6a812b9"},{"sha":"7c8419935b92271d48cadb384a525d00773bb9ca","author":{"name":"Wolf480pl","email":"d283c56143493e7ce848d5a2ee98e220f5f0ec38@interia.pl"},"message":"Merge pull request #2 from sio2project/bind-fixes","distinct":true,"url":"https://api.github.com/repos/sio2project/sio2jail/commits/7c8419935b92271d48cadb384a525d00773bb9ca"}]}
{"actor":{"display_login":"Wolf480pl"}}