hakoniwa
Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.
Language: rust
Author: GitHub Repos (@github-repos)
0 stars · 1 views
Viewing path: deny.toml
Files
- passwd.rs (rs)
- child.rs (rs)
- runc.rs (rs)
- runc (txt)
- unshare.rs (rs)
- sys.rs (rs)
- rlimit.rs (rs)
- cgroups.rs (rs)
- cpu.rs (rs)
- manager.rs (rs)
- error.rs (rs)
- conv.rs (rs)
- resources.rs (rs)
- stdio (txt)
- end_writer.rs (rs)
- end_reader.rs (rs)
- unshare.rs (rs)
- metric (txt)
- proc_pid_smaps_rollup.rs (rs)
- proc_pid_status.rs (rs)
- rusage.rs (rs)
- unshare (txt)
- newnet.rs (rs)
- newns.rs (rs)
- newns (txt)
- mount.rs (rs)
- fs.rs (rs)
- newnet (txt)
- pasta.rs (rs)
- rustslirp.rs (rs)
- network.rs (rs)
- container-cgroups.rs (rs)
- container-unshare-namespace.rs (rs)
- namespace.rs (rs)
- newuser (txt)
- idmap.rs (rs)
- newuser.rs (rs)
- rlimit.rs (rs)
- seccomp.rs (rs)
- seccomp (txt)
- stdio.rs (rs)
- container.rs (rs)
- landlock (txt)
- net (txt)
- rule.rs (rs)
- access.rs (rs)
- fs.rs (rs)
- fs (txt)
- rule.rs (rs)
- access.rs (rs)
- net.rs (rs)
- ruleset.rs (rs)
- etcfs.rs (rs)
- etcfs (txt)
- typeparser.rs (rs)
- error.rs (rs)
- group.rs (rs)
- seccomp.rs (rs)
- landlock.rs (rs)
- error.rs (rs)
- timeout.rs (rs)
- notify.rs (rs)
- Cargo.toml (toml)
- .github (github)
- actions (txt)
- setup (txt)
- action.yaml (yaml)
- workflows (txt)
- release.yml (yml)
- dependabot.yml (yml)
- README.md (md)
- howto-create-profile (txt)
- README.md (md)
- profiles (txt)
- darkhttpd.toml (toml)
- seccomp (txt)
- fine-grained.json (json)
- example.toml (toml)
- fish.toml (toml)
- firefox.toml (toml)
- app-firefox (txt)
- cgroups.md (md)
- command.md (md)
- userns.md (md)
- landlock.md (md)
- mount.md (md)
- seccomp.md (md)
- command (txt)
- setenv.md (md)
- workdir.md (md)
- misc (txt)
- allow-new-privs.md (md)
- hostname.md (md)
- landlock (txt)
- landlock-restrict-tcp-bind.md (md)
- landlock-fs-ro.md (md)
- landlock-fs-rw.md (md)
- landlock-restrict-all.md (md)
- landlock-fs-rx.md (md)
- landlock-restrict-fs.md (md)
- landlock-tcp-bind.md (md)
- landlock-restrict-tcp-connect.md (md)
- landlock-tcp-connect.md (md)
- limit (txt)
- limit-as.md (md)
- limit-fsize.md (md)
- limit-walltime.md (md)
- limit-core.md (md)
- limit-nofile.md (md)
- limit-cpu.md (md)
- network (txt)
- network.md (md)
- userns (txt)
- uidmap.md (md)
- userns.md (md)
- gidmap.md (md)
- user.md (md)
- mount (txt)
- bindmount-ro.md (md)
- rootfs.md (md)
- dir.md (md)
- devfs.md (md)
- symlink.md (md)
- rootdir.md (md)
- tmpfs.md (md)
- bindmount-rw.md (md)
- config (txt)
- field-network.md (md)
- field-namespaces.md (md)
- field-limits.md (md)
- field-mounts.md (md)
- field-landlock.md (md)
- cfg-template.md (md)
- field-seccomp.md (md)
- field-envs.md (md)
- field-rootdir.md (md)
- field-hostname.md (md)
- field-idmap.md (md)
- field-command.md (md)
- field-filesystem.md (md)
- examples_test.rs (rs)
- src (txt)
- lib.rs (rs)
- completion.rs (rs)
- run.rs (rs)
- pathsearch.rs (rs)
- argparse.rs (rs)
- seccomp_test.rs (rs)
- ATTRIBUTION.md (markdown)
- engines-3 (txt)
- sysctl.d (d)
- ossl-modules (txt)
- share (txt)
- apk (txt)
- keys (txt)
- loongarch64 (txt)
- armhf (txt)
- ppc64le (txt)
- mips64 (txt)
- riscv64 (txt)
- x86_64 (txt)
- aarch64 (txt)
- armv7 (txt)
- s390x (txt)
- x86 (txt)
- udhcpc (txt)
- etc (txt)
- logrotate.d (d)
- apk (txt)
- keys (txt)
- busybox-paths.d (d)
- crontabs (txt)
- profile.d (d)
- 20locale.sh (sh)
- ssl1.1 (1)
- modprobe.d (d)
- udhcpc (txt)
- ssl (txt)
- certs (txt)
- network (txt)
- if-up.d (d)
- secfixes.d (d)
- alpine-x86_64 (txt)
- sbin (txt)
- lib (txt)
- apk (txt)
- db (txt)
- var (txt)
- spool (txt)
- cron (txt)
- usr (txt)
- sbin (txt)
- lib (txt)
- engines-3 (txt)
- sysctl.d (d)
- ossl-modules (txt)
- share (txt)
- apk (txt)
- keys (txt)
- loongarch64 (txt)
- armhf (txt)
- ppc64le (txt)
- mips64 (txt)
- riscv64 (txt)
- x86_64 (txt)
- aarch64 (txt)
- armv7 (txt)
- s390x (txt)
- x86 (txt)
- udhcpc (txt)
- etc (txt)
- logrotate.d (d)
- apk (txt)
- keys (txt)
- busybox-paths.d (d)
- crontabs (txt)
- profile.d (d)
- 20locale.sh (sh)
- ssl1.1 (1)
- modprobe.d (d)
- udhcpc (txt)
- ssl (txt)
- certs (txt)
- network (txt)
- if-up.d (d)
- secfixes.d (d)
- scripts (txt)
- field-mounts.toml (toml)
- field-command.toml (toml)
- field-namespaces.toml (toml)
- field-rootdir.toml (toml)
- abstractions (txt)
- unshare-all.toml (toml)
- seccomp (txt)
- fine-grained.json (json)
- landlock.toml (toml)
- rootfs.toml (toml)
- field-limits.toml (toml)
- field-idmap.toml (toml)
- cli (txt)
- cgroups (txt)
- cgroup-memory.md (md)
- cgroup-pids-limit.md (md)
- cgroup-memory-swap.md (md)
- cgroup-cpus.md (md)
- unshare (txt)
- unshare-all.md (md)
- unshare-network.md (md)
- unshare-cgroup.md (md)
- unshare-uts.md (md)
- unshare-ipc.md (md)
- seccomp (txt)
- zsh (txt)
- site-functions (txt)
- apparmor.d (d)
- fish (txt)
- vendor_completions.d (d)
- httpd-1s.py (py)
- fork-bomb.py (py)
- container_test.rs (rs)
- unshare_test.rs (rs)
- seccomp_test.rs (rs)
- landlock_test.rs (rs)
- src (txt)
- Makefile (txt)
- deny.toml (toml)
- README.md (md)
- INSTALL.md (md)
- install.sh (sh)
- architecture.svg (image)
- hakoniwa (txt)
- docs (txt)
- troubleshooting-eperm (txt)
- README.md (md)
- README.md (md)
- LICENSE (txt)
- examples (txt)
- container-network.rs (rs)
- container-landlock.rs (rs)
- container-AIO.rs (rs)
- command-from-closure.rs (rs)
- command-handling-io.rs (rs)
- container-customized-mount.rs (rs)
- container-resource-limit.rs (rs)
- command-metric.rs (rs)
- container-seccomp.rs (rs)
- tests (txt)
- command_test.rs (rs)
- child_test.rs (rs)
- unshare (txt)
- newnet (txt)
- pasta_test.rs (rs)
- seccomp (txt)
- argcmp_test.rs (rs)
- landlock (txt)
- fs_access_test.rs (rs)
- fixtures (txt)
- alpine-aarch64 (txt)
- sbin (txt)
- lib (txt)
- apk (txt)
- db (txt)
- var (txt)
- spool (txt)
- cron (txt)
- usr (txt)
- sbin (txt)
- lib (txt)
- lib.rs (rs)
- metric.rs (rs)
- runctl.rs (rs)
- cgroups (txt)
- memory.rs (rs)
- pids.rs (rs)
- seccomp.md (md)
- filter.rs (rs)
- action.rs (rs)
- rule.rs (rs)
- arch.rs (rs)
- argcmp.rs (rs)
- landlock.rs (rs)
- error.rs (rs)
- command.rs (rs)
- ci.yml (yml)
- dependabot.yml (yml)
- scripts (txt)
- install-libseccomp.sh (sh)
- make-build-completions.sh (sh)
- LICENSE.md (md)
- hakoniwa-cli (txt)
- docs (txt)
- app-makepkg (txt)
- README.md (md)
- container-firefox (txt)
- README.md (md)
- troubleshooting-systemd-resolved (txt)
- README.md (md)
- troubleshooting-apparmor (txt)
- README.md (md)
- usage (txt)
- network.md (md)
- config.md (md)
- unshare.md (md)
- misc.md (md)
- limit.md (md)
- README.md (md)
- LICENSE (txt)
- tests (txt)
- cli_test.rs (rs)
- fixtures (txt)
- scripts (txt)
- httpd-1s.py (py)
- fork-bomb.py (py)
- config (txt)
- field-network.toml (toml)
- field-filesystem.toml (toml)
- field-seccomp.toml (toml)
- cfg-default.toml (toml)
- field-envs.toml (toml)
- field-landlock.toml (toml)
- cfg-template.toml (toml)
- field-hostname.toml (toml)
- xdg.rs (rs)
- slirp.rs (rs)
- assets.rs (rs)
- seccomp.rs (rs)
- assets (txt)
- seccomp (txt)
- podman.json (json)
- audit.json (json)
- main.rs (rs)
- config.rs (rs)
- xdg (txt)
- user_dirs.rs (rs)
- cli (txt)
- subcommands.rs (rs)
- subcommands (txt)
- cli.rs (rs)
- config (txt)
- functions.rs (rs)
- template.rs (rs)
- functions (txt)
- path.rs (rs)
- fs.rs (rs)
- os.rs (rs)
- Cargo.toml (toml)
- CODE_OF_CONDUCT.md (md)
- Cargo.toml (toml)
- etc (txt)
- bash (txt)
- completions (txt)
