Minijail v18

New in this release:

• When a process encounters a seccomp policy failure, print the path to the failing policy.
• Add support for a text-based configuration file.
• Add support for setting and resetting the jailed process' environment.

Minijail v17

Tons of stuff in this release, we haven't tagged a release in a while. We're lazy with highlights this time, so please just see the commit log.

Minijail v16

New in this release:

• Provide idiomatic Rust wrappers for Minijail ([email protected]).

Minijail v15

New in this release:

• Allow more than one @include per syscall filter ([email protected]).
• Close redirected fds after dup2()-ing them ([email protected]).
• Return MINIJAIL_ERR_MOUNT instead of crashing if mount_one fails ([email protected]).

Minijail v14

• Support setting supplementary GIDs in the command line ([email protected]).
• Allow passing an environment to the sandboxed child in the LD_PRELOAD case ([email protected]).

Minijail v13

New in this release:

• Generate syscall frequency files in generate_seccomp_policy.py ([email protected]).
• Clean up man pages (various).
• Add pull request closer for RO GitHub mirror ([email protected]).

Minijail v12

New in this release:

• Better error diagnostics in the seccomp compiler ([email protected]).
• Small fixes.

Minijail v11

New in this release:

• Preserve namespace file descriptors through fork+exec ([email protected]).
• Improvements to minijail_wait() and minijail_kill() ([email protected]).
• Fixes for compile_seccomp_policy ([email protected]).

Minijail v10

New in this release:

• New standalone seccomp compiler ([email protected]).
• Add support for SECCOMP_RET_LOG ([email protected]).
• Allow passing a cap_from_text(3)-compliant string to -c ([email protected]).
• Add support for <, <=, >, >= to runtime seccomp compiler ([email protected]).
• Introduce the ~ unary operator and parenthesized constants ([email protected]).
• Allow passing a new environment to the child ([email protected]).

Minijail v9

linux-v9

Minijail v9.