-
Notifications
You must be signed in to change notification settings - Fork 348
Pull requests: google/nsjail
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
nstun: fail closed on invalid policy rule fields
#289
opened Jul 21, 2026 by
carrerasdarren-cell
Loading…
user: fail closed when supplementary groups cannot be set
#288
opened Jul 21, 2026 by
carrerasdarren-cell
Loading…
sandbox: fail loudly when seccomp_unotify is requested but unusable
#285
opened Jul 18, 2026 by
h1-mrz
Loading…
mnt: apply per-mount nosuid/nodev/noexec recursively to recursive binds
#284
opened Jul 18, 2026 by
h1-mrz
Loading…
mnt: mount the auto-provisioned /proc nosuid,nodev,noexec
#283
opened Jul 18, 2026 by
h1-mrz
Loading…
nstun: block cloud-local service destinations
#282
opened Jul 17, 2026 by
carrerasdarren-cell
Loading…
nstun/tcp: validate guest ACK numbers against the send window
#280
opened Jul 15, 2026 by
g0w6y
Loading…
nstun: validate TCP acknowledgments before processing payload
#279
opened Jul 14, 2026 by
Alearner12
Loading…
Reject directory stdio fds unless explicitly passed
#268
opened May 11, 2026 by
Vincent550102
Loading…
ProTip!
Follow long discussions with comments:>50.