Skip to content

Pull requests: google/nsjail

New pull request New
24 Open 116 Closed
24 Open 116 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

net: seal inherited fds before executing pasta
#297 opened Jul 28, 2026 by soul-sol Loading…
1
Harden jail mounts, capabilities, and nstun networking defaults
#296 opened Jul 28, 2026 by M0nd0R Loading…
5 tasks
contain: retain proc fd directory for descriptor sealing
#294 opened Jul 28, 2026 by soul-sol Loading…
1
unotify: write reports privately and atomically
#293 opened Jul 28, 2026 by carrerasdarren-cell Loading…
Reject path traversal in mount destinations during jail staging
#292 opened Jul 27, 2026 by M0nd0R Loading…
1 of 3 tasks
unotify: bound retained syscall statistics
#290 opened Jul 22, 2026 by rndaom Loading…
1
nstun: fail closed on invalid policy rule fields
#289 opened Jul 21, 2026 by carrerasdarren-cell Loading…
user: fail closed when supplementary groups cannot be set
#288 opened Jul 21, 2026 by carrerasdarren-cell Loading…
mnt: descriptor-confine mount destination resolution
#287 opened Jul 21, 2026 by deprrous Loading…
3
contain: stop setup if PR_SET_NO_NEW_PRIVS fails
#286 opened Jul 20, 2026 by srkyn Loading…
2
sandbox: fail loudly when seccomp_unotify is requested but unusable
#285 opened Jul 18, 2026 by h1-mrz Loading…
mnt: apply per-mount nosuid/nodev/noexec recursively to recursive binds
#284 opened Jul 18, 2026 by h1-mrz Loading…
mnt: mount the auto-provisioned /proc nosuid,nodev,noexec
#283 opened Jul 18, 2026 by h1-mrz Loading…
nstun: block cloud-local service destinations
#282 opened Jul 17, 2026 by carrerasdarren-cell Loading…
2
Reject invalid integer command-line arguments
#281 opened Jul 16, 2026 by attaboy11 Loading…
1
1
nstun/tcp: validate guest ACK numbers against the send window
#280 opened Jul 15, 2026 by g0w6y Loading…
nstun: validate TCP acknowledgments before processing payload
#279 opened Jul 14, 2026 by Alearner12 Loading…
cgroup: clean up swap-only memory cgroups
#278 opened Jul 13, 2026 by sravan27 Loading…
1
mnt: make recursive read-only binds truly recursive
#277 opened Jul 11, 2026 by Alb3e3 Loading…
1
Harden numeric parsing and command overrides
#276 opened Jul 11, 2026 by M0nd0R Loading…
Harden pasta helper execution
#275 opened Jul 9, 2026 by M0nd0R Loading…
Validate mount destinations before building mount trees
#274 opened Jul 9, 2026 by M0nd0R Loading…
[RFC] Add option to create init inside the container
#272 opened Jun 29, 2026 by mattmart3 Loading…
1
Reject directory stdio fds unless explicitly passed
#268 opened May 11, 2026 by Vincent550102 Loading…
1
ProTip! no:milestone will show everything without a milestone.