All pull requests

Pull requests

• fix: coordinate sandbox startup, reset, and failure cleanup

  #677·Tunaycel opened Oct 8, 2026·

  ·

• fix: compare repeated filesystem path entries consistently

  #676·Tunaycel opened Oct 8, 2026·

  ·

• linux: the refusal at 9000 bwrap arguments says whose they are

  #675·ronleizrowice-ant opened Oct 8, 2026Collaborator·

  ·

• linux: remember a bwrap --version probe that got no answer

  #674·ronleizrowice-ant opened Oct 8, 2026Collaborator·

  ·

• linux: stop removing an empty read-only file found at a write-deny path

  #673·ronleizrowice-ant opened Oct 8, 2026Collaborator·

  ·

• Glob walk: ask for the type of an entry that was listed without one

  #672·ronleizrowice-ant opened Oct 8, 2026Collaborator·

  ·

• linux: remove mount points when the last sandbox is done, and never under a running one

  #671·ronleizrowice-ant opened Oct 8, 2026Collaborator·

  ·

• Remove the library's temp objects at exit, and after an initialize() that fails

  #670·ronleizrowice-ant opened Oct 8, 2026Collaborator·

  ·

• linux: report a credential file deny whose pattern is skipped

  #669·ronleizrowice-ant opened Oct 8, 2026Collaborator·

  ·

• srt-proxy: add --version

  #668·ant-kurt opened Oct 8, 2026Collaborator·

  ·

• Release v0.0.80

  #664·ronleizrowice-ant opened Oct 7, 2026Collaborator·

  ·

• windows: let the sandbox user stat the folders above a granted path

  #661·karljamoralin opened Oct 7, 2026·

  ·

• linux: quote the socat socket addresses

  #659·v0ropaev opened Oct 6, 2026·

  ·
  1

• Run Windows session ACL operations asynchronously

  #651·sylvesterkaczmarek opened Oct 4, 2026·

  ·
  1

  1

• windows: srt-win exec passes the caller's stdin through to the sandboxed child

  #648·karljamoralin opened Oct 3, 2026·

  ·
  1

• feat(macos): allow configurable IOKit registry entry and user client classes

  #641·swaraj792725 opened Oct 1, 2026·

  ·
  1

• Upgrade to MXC 0.9.0

  #640·shschaefer opened Oct 1, 2026·

  ·

• fix(cli): propagate child signal termination status and exit code

  #635·swaraj792725 opened Sep 30, 2026·

  ·
  1

• fix(sandbox): allow seccompConfig in checkDependencies and checkDependenciesAsync

  #634·swaraj792725 opened Sep 30, 2026·

  ·
  1

• checkDependencies: accept a seccompConfig, like ripgrepConfig

  #633·jayzuccarelli opened Sep 30, 2026·

  ·
  1

• fix(sandbox): quote UNIX-CONNECT socket addresses in linux sandbox command

  #625·swaraj792725 opened Sep 29, 2026·

  ·
  2

• Draft, not for merging: every ready fix merged together

  #624·ronleizrowice-ant opened Sep 29, 2026Collaborator·

  ·

• macos: re-emit a literal read deny that a glob allow reaches into

  #619·v0ropaev opened Sep 28, 2026·

  ·

• linux: with no seccomp helper, have bubblewrap disable user namespaces

  #617·ronleizrowice-ant opened Sep 28, 2026Collaborator·

  ·

• linux: keep the mount point manifests where the user id says, first under /var/tmp

  #615·ronleizrowice-ant opened Sep 27, 2026Collaborator·

  ·