pool/nsjail
SHA256
17
0
Fork 1
Code Issues Pull Requests Activity
Files
factory
nsjail/nsjail.changes

211 lines
8.5 KiB
Plaintext
Raw Permalink Normal View History

Accepting request 1172144 from home:mlin7442:rebuild_fails_156 fix leap build OBS-URL: https://build.opensuse.org/request/show/1172144 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=27
2024-05-06 11:19:24 +00:00
-------------------------------------------------------------------
Mon May 6 10:05:10 UTC 2024 - Max Lin <mlin@suse.com>
- Build with protobuf21 on Leap 15 if the version is greater than
15.3, protobuf25 has added to SLE15 since SP4 update (bsc#1222929)
Accepting request 1144235 from home:wfrisch:branches:security - Update to version 3.4+git14.b740dcf: * Improved cgroups2 support * Improved cgroups2 + docker interoperability * New configs: hexchat, telegram * Better support for clone3 * New signals displayed: SIGPWR * Support for nvim+.clangd * Improved .clang-format rules * Print help to stdout if -h | --help was used OBS-URL: https://build.opensuse.org/request/show/1144235 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=24
2024-02-05 12:37:22 +00:00
-------------------------------------------------------------------
Mon Feb 05 12:25:41 UTC 2024 - wolfgang.frisch@suse.com
- Update to version 3.4+git14.b740dcf:
* Improved cgroups2 support
* Improved cgroups2 + docker interoperability
* New configs: hexchat, telegram
* Better support for clone3
* New signals displayed: SIGPWR
* Support for nvim+.clangd
* Improved .clang-format rules
* Print help to stdout if -h | --help was used
Accepting request 1056425 from home:amanzini:branches:security - drop obscpio file upon request - Update to version 3.3+git1.5b48117: * configs/xchat: mount whole /tmp/.X11-unix * Setup cgroup.subtree_control controllers when necessary in cgroupsv2 * Unset LDFLAGS for kafel * config/xchat: move original .xchat2 config dir to .config/ * Update kafel * configs/bash: remove tmpfs mount over /dev as it makes /dev/null non-writeable * configs/firefox-with-net-wayland: x11 socket is not needed here * nsjail: use atomic in sighandlers * configs/xchat-with-net: use 8.8.8.8 in resolv.conf unconditionally * cpu: more debug messaging * mnt: quote paths in log messages * Switch C++ standard to C++14 - it'll allow to use new features, like std::quoted * mnt: remove unnecessary quote in a debug message * cpu/subproc: better debugging strings * cpu: even better LOG_Ds * cpu: Add more debugging messages * Make logs more efficient by avoiding argument evaluation for LOG* if it's not needed at the current level * When setting CPU affinity, take into consideration the current CPU affinity set. Use only CPU numbers, which exist in the current affinity set. Maybe fixes https://github.com/google/nsjail/issues/200 * subproc: Allow killing subprocesses with different signal * Add `disable_tsc` option OBS-URL: https://build.opensuse.org/request/show/1056425 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=20
2023-01-09 07:56:33 +00:00
-------------------------------------------------------------------
Accepting request 1105443 from home:wfrisch:branches:security - Fixed Tumbleweed build error caused by an incompatible libprotobuf. - Restore build on Leap 15.4 and older. - Update to version 3.3+git14.8308b91: * subproc: mark cloneFunc as [[noreturn]] * subproc: support CLONE_CLEAR_SIGHAND * subproc: display additional clone3 flags * configs/: formatting * configs/telegram: telegram is 64 bit only * configs/telegram: a new config for the telegram-desktop * formatting fix * Better output formatting for --help * cgroup2.cc: improve note about using Docker * logs: respect getenv(NO_COLOR) * configs/hexchat: new config based on xchat * Mount read-only directly if mounting rw fails OBS-URL: https://build.opensuse.org/request/show/1105443 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=22
2023-08-23 09:15:56 +00:00
Wed Aug 23 08:54:02 UTC 2023 - wolfgang.frisch@suse.com
- Fixed Tumbleweed build error caused by an incompatible libprotobuf.
- Update to version 3.3+git14.8308b91:
* subproc: mark cloneFunc as [[noreturn]]
* subproc: support CLONE_CLEAR_SIGHAND
* subproc: display additional clone3 flags
* configs/: formatting
* configs/telegram: telegram is 64 bit only
* configs/telegram: a new config for the telegram-desktop
* formatting fix
* Better output formatting for --help
* cgroup2.cc: improve note about using Docker
* logs: respect getenv(NO_COLOR)
* configs/hexchat: new config based on xchat
* Mount read-only directly if mounting rw fails
-------------------------------------------------------------------
Accepting request 1056425 from home:amanzini:branches:security - drop obscpio file upon request - Update to version 3.3+git1.5b48117: * configs/xchat: mount whole /tmp/.X11-unix * Setup cgroup.subtree_control controllers when necessary in cgroupsv2 * Unset LDFLAGS for kafel * config/xchat: move original .xchat2 config dir to .config/ * Update kafel * configs/bash: remove tmpfs mount over /dev as it makes /dev/null non-writeable * configs/firefox-with-net-wayland: x11 socket is not needed here * nsjail: use atomic in sighandlers * configs/xchat-with-net: use 8.8.8.8 in resolv.conf unconditionally * cpu: more debug messaging * mnt: quote paths in log messages * Switch C++ standard to C++14 - it'll allow to use new features, like std::quoted * mnt: remove unnecessary quote in a debug message * cpu/subproc: better debugging strings * cpu: even better LOG_Ds * cpu: Add more debugging messages * Make logs more efficient by avoiding argument evaluation for LOG* if it's not needed at the current level * When setting CPU affinity, take into consideration the current CPU affinity set. Use only CPU numbers, which exist in the current affinity set. Maybe fixes https://github.com/google/nsjail/issues/200 * subproc: Allow killing subprocesses with different signal * Add `disable_tsc` option OBS-URL: https://build.opensuse.org/request/show/1056425 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=20
2023-01-09 07:56:33 +00:00
Fri Jan 6 16:17:58 UTC 2023 - Andrea Manzini <andrea.manzini@suse.com>
- drop obscpio file upon request
-------------------------------------------------------------------
Thu Jan 05 15:43:58 UTC 2023 - andrea.manzini@suse.com
- Update to version 3.3+git1.5b48117:
* configs/xchat: mount whole /tmp/.X11-unix
* Setup cgroup.subtree_control controllers when necessary in cgroupsv2
* Unset LDFLAGS for kafel
* config/xchat: move original .xchat2 config dir to .config/
* Update kafel
* configs/bash: remove tmpfs mount over /dev as it makes /dev/null non-writeable
* configs/firefox-with-net-wayland: x11 socket is not needed here
* nsjail: use atomic in sighandlers
* configs/xchat-with-net: use 8.8.8.8 in resolv.conf unconditionally
* cpu: more debug messaging
* mnt: quote paths in log messages
* Switch C++ standard to C++14 - it'll allow to use new features, like std::quoted
* mnt: remove unnecessary quote in a debug message
* cpu/subproc: better debugging strings
* cpu: even better LOG_Ds
* cpu: Add more debugging messages
* Make logs more efficient by avoiding argument evaluation for LOG* if it's not needed at the current level
* When setting CPU affinity, take into consideration the current CPU affinity set. Use only CPU numbers, which exist in the current affinity set. Maybe fixes https://github.com/google/nsjail/issues/200
* subproc: Allow killing subprocesses with different signal
* Add `disable_tsc` option
Accepting request 943928 from home:jsegitz:branches:security - Changed version string to 3.0+git72.dccf911 and adjusted service file. The previous version scheme results in version strings that are "lower" that e.g. 3.0. OBS-URL: https://build.opensuse.org/request/show/943928 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=19
2022-01-05 08:45:46 +00:00
-------------------------------------------------------------------
Wed Jan 05 08:34:49 UTC 2022 - jsegitz@suse.com
- Changed version string to 3.0+git72.dccf911 and adjusted
service file. The previous version scheme results in version
strings that are "lower" that e.g. 3.0.
Accepting request 943889 from home:firstyear:branches:security Update to latest git revision of nsjail, and include _service file to make future updates easier. This also means that Kafel is included in the git submodule sources so it's not needed as a tar. OBS-URL: https://build.opensuse.org/request/show/943889 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=18
2022-01-05 07:50:20 +00:00
-------------------------------------------------------------------
Wed Jan 05 03:41:13 UTC 2022 - william.brown@suse.com
- Update to version 3.0~git72.dccf911:
* log: use TEMP_FAILURE_RETRY instead of fallback to dprintf
* make indent
* Fix compile using `FROM ubuntu:20.04`
* cgroup2: use cgroup_mem_swap_max and cgroup_mem_memsw_max
* cgroup2: support cgroup_mem_memsw_max
* fix mem clean in finishFromParent
* Fix whitespace in kafel
* Fix build
* Update kafel for RISC-V support
* Add support for setting cgroup memory.memsw.limit_in_bytes
* Allow mount options to contain colons.
* macros: make NS_VALSTR_STRUCT accept unsigned/64-bit vals
* configs/firefox-with-net-wayland.cfg: retain original WAYLAND_DISPLAY value
* The default rlimit_as value is 4096, not 512.
* configs: firefox+wayland example
* config.proto: renumerate fields
* configs/imagemagick: alternative file conversion command
* Fix duplicate field number
* Fix formatting
* Update kafel - x86 build fixes
* cgroup: write period before quota
* rtprio, msgqueue - defaulting to 'soft'
* Renaming use_switchroot option with no_pivotroot
* Consistentency with RLIMIT_* constant name
* Adding a warning when switchroot is used
* Added rt, memlock & msgq limits
* subproc: warn about CLONE_NEWTIME and clone(), and remove notice about CLONE_NEWCGROUP as the kernel versions should be now new enough for its support
* subproc: debug log for unshare()
* Merge branch '_test_switchroot_alternative'
* No Yoda
* cmdline: clone_newcgroup -> true by default; clone_newtime should be false
* Comment fix
* Added use_switchroot option
* make indent
* MACVLAN modes support
* Enable support for clone3() and for CLONE_NEWTIME
* Fixed macro in subproc.cc
* Initial support for CLONE_NEWTIME
* Update kafel to include bugfixes
* configs/ - add comments to config files using #
* Bump kafel
* Yet another bugfix Kafel version bump
* update kafel again to include a bugfix.
* Update kafel
* Fix default value of cgroup_cpu_mount in README
* Fix typo in command line description
* net: add support for max_conns
* subproc: refer users to dmesg in case si_syscall==31 (SIGSYS)
* Fix build
* Add new capabilities, ignore unsupported caps for bounding set
* nsjail: don't add connections to the proxy map if launching a new process failed
* subproc: kill a process once in the -Ml mode once the TCP connection has ended
* make indent
* remove build dependency on which
* Makefile: compile kafel with -fPIE (maybe fixes #149)
* Fix compilation errors on old gcc (5.4.0)
* config.proto: make indent
* config.proto: renumerate config fields
-------------------------------------------------------------------
Wed Jan 05 03:32:47 UTC 2022 - william.brown@suse.com
- Add _service file to allow updating directly from git
Accepting request 815758 from home:jsegitz:branches:security - Add remove_werror.patch to prevent build errors due to deprecation warnings. I expect this can be removed with 3.0 OBS-URL: https://build.opensuse.org/request/show/815758 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=14
2020-06-18 14:32:12 +00:00
-------------------------------------------------------------------
Accepting request 823379 from home:polslinux:branches:security - Update to 3.0: * the TCP proxy mode is a socketpair proxy now * fixes for some configs/ (e.g. for xchat and for znc) * new clone option recognized (CLONE_NEWPID) * fixed max_conns_per_ip * clarification of units for cgroups_mem_max - Remove remove_werror.patch OBS-URL: https://build.opensuse.org/request/show/823379 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=16
2020-07-29 13:09:44 +00:00
Tue Jul 28 09:10:57 UTC 2020 - Paolo Stivanin <info@paolostivanin.com>
- Update to 3.0:
* the TCP proxy mode is a socketpair proxy now
* fixes for some configs/ (e.g. for xchat and for znc)
* new clone option recognized (CLONE_NEWPID)
* fixed max_conns_per_ip
* clarification of units for cgroups_mem_max
- Remove remove_werror.patch
-------------------------------------------------------------------
Accepting request 815758 from home:jsegitz:branches:security - Add remove_werror.patch to prevent build errors due to deprecation warnings. I expect this can be removed with 3.0 OBS-URL: https://build.opensuse.org/request/show/815758 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=14
2020-06-18 14:32:12 +00:00
Thu Jun 18 13:59:19 UTC 2020 - Johannes Segitz <jsegitz@suse.com>
- Add remove_werror.patch to prevent build errors due to deprecation
warnings. I expect this can be removed with 3.0
Accepting request 769581 from home:jsegitz:branches:security - Update to version 2.9. Notable changes: * improved configs for some tools * changed default RLIMIT_AS to 4GiB * rudimentary support for cgroups2 * added option to ignore rlimits * fixed setcwd() w/o CLONE_NEWNS OBS-URL: https://build.opensuse.org/request/show/769581 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=12
2020-02-03 13:30:08 +00:00
-------------------------------------------------------------------
Mon Feb 3 09:34:09 UTC 2020 - Johannes Segitz <jsegitz@suse.de>
- Update to version 2.9. Notable changes:
* improved configs for some tools
* changed default RLIMIT_AS to 4GiB
* rudimentary support for cgroups2
* added option to ignore rlimits
* fixed setcwd() w/o CLONE_NEWNS
Accepting request 760396 from home:cgiboudeaux:branches:security Disable lto to fix the factory build + cleanup. OBS-URL: https://build.opensuse.org/request/show/760396 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=10
2020-01-03 08:00:28 +00:00
-------------------------------------------------------------------
Thu Jan 2 10:29:39 UTC 2020 - Christophe Giboudeaux <christophe@krop.fr>
- Disable lto for building nsjail.
- Run spec-cleaner, install the license file.
Accepting request 681205 from home:jsegitz:branches:security - Ensure build only on 64 bit machines OBS-URL: https://build.opensuse.org/request/show/681205 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=6
2019-03-04 07:53:18 +00:00
-------------------------------------------------------------------
Accepting request 684097 from home:jsegitz:branches:security - Fixed ExclusiveArch: to correct architecture OBS-URL: https://build.opensuse.org/request/show/684097 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=8
2019-03-11 17:34:13 +00:00
Mon Mar 11 17:26:53 UTC 2019 - jsegitz@suse.com
- Fixed ExclusiveArch: to correct architecture
-------------------------------------------------------------------
Accepting request 681205 from home:jsegitz:branches:security - Ensure build only on 64 bit machines OBS-URL: https://build.opensuse.org/request/show/681205 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=6
2019-03-04 07:53:18 +00:00
Mon Mar 4 07:11:25 UTC 2019 - jsegitz@suse.com
- Ensure build only on 64 bit machines
Accepting request 671899 from home:jsegitz:branches:security - Retire old $RPM_* shell vars and %__-type macro indirections. OBS-URL: https://build.opensuse.org/request/show/671899 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=3
2019-02-05 14:21:53 +00:00
-------------------------------------------------------------------
Tue Feb 5 13:50:16 UTC 2019 - jsegitz@suse.com
- Retire old $RPM_* shell vars and %__-type macro indirections.
Accepting request 671310 from home:jsegitz:branches:security - Update to version 2.8 * ability to specify noexec/nodev/nosuid in mounts * added --macvlan_vs_ma option * better example configs * changed behavior of --env - empty var means passing it from parent - Fixed requires for libnl3 - Removed format-truncation.patch, string handling was reworked OBS-URL: https://build.opensuse.org/request/show/671310 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=2
2019-02-05 07:54:29 +00:00
-------------------------------------------------------------------
Tue Feb 5 07:44:04 UTC 2019 - jsegitz@suse.com
- Update to version 2.8
* ability to specify noexec/nodev/nosuid in mounts
* added --macvlan_vs_ma option
* better example configs
* changed behavior of --env - empty var means passing it from parent
- Fixed requires for libnl3
- Removed format-truncation.patch, string handling was reworked
Accepting request 636896 from home:jsegitz initial submission OBS-URL: https://build.opensuse.org/request/show/636896 OBS-URL: https://build.opensuse.org/package/show/security/nsjail?expand=0&rev=1
2018-09-21 06:23:39 +00:00
-------------------------------------------------------------------
Thu Sep 20 13:23:00 UTC 2018 - jsegitz@suse.com
- Added format-truncation.patch to prevent truncation warnings
-------------------------------------------------------------------
Thu Sep 20 12:11:46 UTC 2018 - jsegitz@suse.com
- Initial import of version 2.7
Reference in New Issue Copy Permalink