Minijail v8

New in this release:

• Change default mount flags with -k ([email protected]).
• Change default mount settings for tmpfs mounts ([email protected]).
• Allow passing a cap_from_text(3)-compliant string to -c ([email protected]).

Minijail v7

New in this release:

• syscall_filter: Add support for <, <=, >, >=. ([email protected]).

Minijail v6

New in this release:

• When not setting SECURE_NOROOT, allow keeping the bounding set ([email protected]).
• Improve rlimit/mount CLI ([email protected]).
• Fix a local hack to allow compiling against glibc 2.27+ ([email protected]).

Minijail v5

New in this release:

• Improve the generate_seccomp_policy.py script ([email protected]).

Minijail v4

New in this release:

• generate_seccomp_policy.py now supports strace -f ([email protected]).

Minijail v3

New in this release:

• Socket constants for seccomp filters ([email protected]).

Minijail v2

New in this release:

• Support for ambient capabilities.
• Add minijail_fork() for use cases that don't want execve(2) ([email protected]).
• Add an option to set up a minimal /dev ([email protected]).
• A ton of fixes, mostly from fuzzing ([email protected]).

Minijail v1

First tagged Minijail release for the world!