External/passt
1
0
Fork 0
mirror of https://passt.top/passt synced 2024-12-22 13:45:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • b686afa23e apparmor: Explicitly pass options we use while remounting root filesystem Stefano Brivio 2023-09-06 20:54:52 +0200
  • 6d3e426d2f apparmor: Use abstractions/nameservice to deal with symlinked resolv.conf Stefano Brivio 2023-09-06 20:39:12 +0200
  • a7e4bfb857 pasta: Strip RTA_PREFSRC when copying routes to the namespace 2023_08_23.a7e4bfb David Gibson 2023-08-23 17:03:38 +1000
  • 5e4f7b92b0 netlink: Set IFA_ADDRESS, not just IFA_LOCAL, while adding IPv4 addresses Stefano Brivio 2023-08-23 09:34:44 +0200
  • 69303cafbe tcp: Remove broken pressure calculations for tcp_defer_handler() David Gibson 2023-08-22 15:30:00 +1000
  • eb8fbdbfd0 inany: Add missing double include guard to inany.h David Gibson 2023-08-22 15:29:59 +1000
  • b60fa33eea tcp: Move in_epoll flag out of common connection structure David Gibson 2023-08-22 15:29:58 +1000
  • 955dd3251c tcp, udp: Don't pre-fill IPv4 destination address in headers David Gibson 2023-08-22 15:29:57 +1000
  • 5bf200ae8a tcp, udp: Don't include destination address in partially precomputed csums David Gibson 2023-08-22 15:29:56 +1000
  • 8aa32009ed tcp: Consistent usage of ports in tcp_seq_init() David Gibson 2023-08-22 15:29:55 +1000
  • bccfbff193 tcp: More precise terms for addresses and ports David Gibson 2023-08-22 15:29:54 +1000
  • cee4a2da48 tap: Pass source address to protocol handler functions David Gibson 2023-08-22 15:29:53 +1000
  • 673bde1f21 tap: Don't clobber source address in tap6_handler() David Gibson 2023-08-22 15:29:52 +1000
  • 0af928eaa0 selinux: Fix domain transitions for typical commands pasta might run 2023_08_18.0af928e Stefano Brivio 2023-08-16 07:20:30 +0200
  • 30817fdd4e selinux: Allow pasta_t to read nsfs entries Stefano Brivio 2023-08-15 19:56:15 +0200
  • 977652155d selinux: Add rules for sysctl and /proc/net accesses Stefano Brivio 2023-08-15 19:50:48 +0200
  • 56b8633a6b selinux: Update policy to fix user/group settings Stefano Brivio 2023-08-15 19:37:46 +0200
  • 62059058cf selinux: Fix user namespace creation after breaking kernel change Stefano Brivio 2023-08-15 18:53:48 +0200
  • 0c42326204 selinux: Use explicit paths for binaries in file context Stefano Brivio 2023-08-15 18:34:45 +0200
  • 479a9e1b4d fedora: Install pasta as hard link to ensure SELinux file context match Stefano Brivio 2023-08-15 18:22:02 +0200
  • 5f1fcfffe4 tap: Fix format specifier in tap4_is_fragment() warning Stefano Brivio 2023-08-16 08:20:17 +0200
  • da0aeb9080 netlink: Don't propagate host address expiry to the container David Gibson 2023-08-15 13:51:29 +1000
  • b4f8ffd5c4 netlink: Correctly calculate attribute length for address messages David Gibson 2023-08-15 13:51:28 +1000
  • 4b9f4c2513 netlink: Remove redundant check on nlmsg_type David Gibson 2023-08-15 13:51:27 +1000
  • 5ed4e034b2 conf: Demote overlapping port ranges error to a warning David Gibson 2023-08-11 17:36:00 +1000
  • ae5f6c8e1b epoll: Use different epoll types for passt and pasta tap fds David Gibson 2023-08-11 15:12:29 +1000
  • eda4f1997e epoll: Split listening Unix domain socket into its own type David Gibson 2023-08-11 15:12:28 +1000
  • 485b5fb8f9 epoll: Split handling of listening TCP sockets into their own handler David Gibson 2023-08-11 15:12:27 +1000
  • e6f81e5578 epoll: Split handling of TCP timerfds into its own handler function David Gibson 2023-08-11 15:12:26 +1000
  • 8271a2ed57 epoll: Tiny cleanup to udp_sock_handler() David Gibson 2023-08-11 15:12:25 +1000
  • 05f606ab0b epoll: Split handling of ICMP and ICMPv6 sockets David Gibson 2023-08-11 15:12:24 +1000
  • d850caab66 epoll: Fold sock_handler into general switch on epoll event fd David Gibson 2023-08-11 15:12:23 +1000
  • 6a6735ece4 epoll: Always use epoll_ref for the epoll data variable David Gibson 2023-08-11 15:12:22 +1000
  • 3401644453 epoll: Generalize epoll_ref to cover things other than sockets David Gibson 2023-08-11 15:12:21 +1000
  • e26282b67d tap: Fold reset handling into tap_handler_passt() David Gibson 2023-08-11 15:12:20 +1000
  • 0d870c5da6 tap: Fold reset handling into tap_handler_pasta() David Gibson 2023-08-11 15:12:19 +1000
  • 548e05f76a tap: Clean up behaviour for errors on listening Unix socket David Gibson 2023-08-11 15:12:18 +1000
  • 28877b0fcd tap: Clean up tap reset path David Gibson 2023-08-11 15:12:17 +1000
  • b2bea0047d tap: fix seq->p.count limit Laurent Vivier 2023-08-09 11:23:42 +0200
  • 02b30e7871 netlink: Propagate errors for "dup" operations David Gibson 2023-08-03 17:19:56 +1000
  • 5103811e2d netlink: Propagate errors for "dump" operations David Gibson 2023-08-03 17:19:55 +1000
  • 4d6e9d0816 netlink: Always process all responses to a netlink request David Gibson 2023-08-03 17:19:54 +1000
  • 8de9805224 netlink: Propagate errors for "set" operations David Gibson 2023-08-03 17:19:53 +1000
  • a309318275 netlink: Add nl_foreach_oftype to filter response message types David Gibson 2023-08-03 17:19:52 +1000
  • 99ddd7ce83 netlink: Split nl_req() to allow processing multiple response datagrams David Gibson 2023-08-03 17:19:51 +1000
  • 8ec757d003 netlink: Clearer reasoning about the netlink response buffer size David Gibson 2023-08-03 17:19:50 +1000
  • 9d4ab98d53 netlink: Add nl_do() helper for simple operations with error checking David Gibson 2023-08-03 17:19:49 +1000
  • 282581ba84 netlink: Fill in netlink header fields from nl_req() David Gibson 2023-08-03 17:19:48 +1000
  • f62600b2df netlink: Treat send() or recv() errors as fatal David Gibson 2023-08-03 17:19:47 +1000
  • 0a568c847d netlink: Start sequence number from 1 instead of 0 David Gibson 2023-08-03 17:19:46 +1000
  • dee7594180 netlink: Make nl_*_dup() use a separate datagram for each request David Gibson 2023-08-03 17:19:45 +1000
  • 576df71e8b netlink: Explicitly pass netlink sockets to operations David Gibson 2023-08-03 17:19:44 +1000
  • cfe7509e5c netlink: Use struct in_addr for IPv4 addresses, not bare uint32_t David Gibson 2023-08-03 17:19:43 +1000
  • 257a6b0b7e netlink: Split nl_route() into separate operation functions David Gibson 2023-08-03 17:19:42 +1000
  • eff3bcb245 netlink: Split nl_addr() into separate operation functions David Gibson 2023-08-03 17:19:41 +1000
  • e96182e9c2 netlink: Split up functionality of nl_link() David Gibson 2023-08-03 17:19:40 +1000
  • 0cf7bf31f6 tap: Remove unnecessary global tun_ns_fd David Gibson 2023-08-02 13:15:42 +1000
  • 7bc9b66fc2 tap: More detailed error reporting in tap_ns_tun() David Gibson 2023-08-02 13:15:41 +1000
  • 6920adda0d util: Make ns_enter() a void function and report setns() errors David Gibson 2023-08-02 13:15:40 +1000
  • b15ce5b6ce Use static assertion to verify that union epoll_ref is the right size David Gibson 2023-08-01 13:36:47 +1000
  • 8218d99013 Use C11 anonymous members to make poll refs less verbose to use David Gibson 2023-08-01 13:36:46 +1000
  • 649068a287 Allow C11 code, not just C99 code David Gibson 2023-08-01 13:36:45 +1000
  • 023d684420 Revert "MAKE: Fix parallel builds; .o files; .gitignore; new makedocs" Stefano Brivio 2023-07-10 06:33:44 +0200
  • cc2a6bec3c MAKE: Fix parallel builds; .o files; .gitignore; new makedocs KuhnChris 2023-06-28 16:07:28 +0200
  • e01759e2fa tap: Explicitly drop IPv4 fragments, and give a warning David Gibson 2023-07-05 14:35:16 +1000
  • 4c98d3be80 conf: Correct length checking of interface names in conf_ports() David Gibson 2023-06-28 15:11:15 +1000
  • c4017cc4a1 conf: Fix size checking of -I interface name David Gibson 2023-06-28 15:11:14 +1000
  • 289301b39c netlink: Use correct interface index in NL_SET mode 2023_06_27.289301b David Gibson 2023-06-27 20:22:33 +1000
  • 32660cea04 pasta: include errno in error message 2023_06_25.32660ce Paul Holzinger 2023-06-23 12:23:50 +0200
  • 594dce66d3 isolation: keep CAP_SYS_PTRACE when required Paul Holzinger 2023-06-23 10:25:32 +0200
  • 5b646b9b10 conf: Accept -a and -g without --config-net in pasta mode Stefano Brivio 2023-06-23 09:52:36 +0200
  • d034fb698f conf: Make -a/--address really imply --no-copy-addrs Stefano Brivio 2023-06-22 15:46:41 +0200
  • db29fd281a seccomp: Make seccomp.sh re-entrancy safe David Gibson 2023-06-21 13:06:37 +1000
  • 3c6d1b9bb2 conf, log: On -h / --help, print usage to stdout, not stderr Stefano Brivio 2023-06-04 07:14:49 +0200
  • d072ac2434 tap: With pasta, don't reset on tap errors, handle write failures Stefano Brivio 2023-06-04 06:51:47 +0200
  • 429e1a7e71 conf: Fix erroneous check of ip6->gw 2023_06_03.429e1a7 David Gibson 2023-06-02 15:02:02 +1000
  • e3b19530e4 test/nstool: Fix fd leak in accept() loop David Gibson 2023-05-23 12:25:43 +1000
  • 527c822a3b test/nstool: Provide useful error if given a path that's too long David Gibson 2023-05-23 12:25:42 +1000
  • 9f61c5b68b passt.h: Fix description of pasta_ifi in struct ctx Stefano Brivio 2023-05-14 19:46:39 +0200
  • cc9d16758b conf, pasta: With --config-net, copy all addresses by default Stefano Brivio 2023-05-14 19:12:09 +0200
  • e89da3cf03 netlink: Add functionality to copy addresses from outer namespace Stefano Brivio 2023-05-14 18:44:53 +0200
  • a7359f0948 conf: Don't exit if sourced default route has no gateway Stefano Brivio 2023-05-14 16:24:11 +0200
  • e8fef7525c Revert "conf: Adjust netmask on mismatch between IPv4 address/netmask and gateway" Stefano Brivio 2023-05-14 15:22:00 +0200
  • da54641f14 conf, pasta: With --config-net, copy all routes by default Stefano Brivio 2023-05-14 15:04:38 +0200
  • 468f19a852 conf: --config-net option is for pasta mode only Stefano Brivio 2023-05-14 14:14:29 +0200
  • 2fe0461856 netlink: Add functionality to copy routes from outer namespace Stefano Brivio 2023-05-14 13:49:43 +0200
  • f099afb1f2 pasta: Improve error handling on failure to join network namespace Stefano Brivio 2023-05-14 13:32:41 +0200
  • 1c3c68970e netlink: Fix comment about response buffer size for nl_req() Stefano Brivio 2023-05-14 13:30:18 +0200
  • 770d1a4502 isolation: Initially Keep CAP_SETFCAP if running as UID 0 in non-init Stefano Brivio 2023-05-21 15:03:31 +0200
  • b0e450aa85 pasta: Detach mount namespace, (re)mount procfs before spawning command Stefano Brivio 2023-05-21 14:50:11 +0200
  • b0881aae6d util, conf: Add and use ns_is_init() helper Stefano Brivio 2023-05-21 14:47:07 +0200
  • 25f1d1a84f tap: Don't update ip6.addr_seen to :: David Gibson 2023-05-16 10:36:11 +1000
  • 96f8d55c4f correct -6 option in manpage 2023_05_09.96f8d55 lemmi 2023-05-08 18:05:01 +0200
  • 940bd3eff9 passt: Fix error check for signal(), improve error messages Stefano Brivio 2023-04-13 19:32:13 +0200
  • 1a3ade9037 nstool: Enter holder's cwd when changing mount ns with nstool exec David Gibson 2023-04-06 13:28:19 +1000
  • 98031bee73 nstool: Advertise the holder's cwd (in its mountns) across the socket David Gibson 2023-04-06 13:28:18 +1000
  • 469b69aaa1 test: Use "nstool exec" to slightly simplify tests David Gibson 2023-04-06 13:28:17 +1000
  • 3372cd0902 test: Initialise ${TRACE} properly David Gibson 2023-04-06 13:28:16 +1000
  • 329149d51a nstool: Add --keep-caps option to nstool exec David Gibson 2023-04-06 13:28:15 +1000
  • 0b66944648 nstool: Add nstool exec command to execute commands in an nstool namespace David Gibson 2023-04-06 13:28:14 +1000