Alexander Larsson b1aa93a9d4 Use seccomp to limit allowed syscalls
We disallow any network family but inet, inet6, unix and netlink
as the rest are generally weird old unused things.

We also have a blacklist of syscalls, some are just old unnecessary
things, some are things that are "risky", like NUMA/VM control, and
setting up custom sub-namespaces.
2015-06-02 11:14:27 +02:00
2015-03-11 10:25:15 +01:00
2015-04-05 22:13:45 +02:00
2015-05-21 18:54:06 +02:00
2015-03-20 15:57:22 +01:00
2015-03-20 15:57:22 +01:00
2015-03-31 15:36:29 +01:00
2015-05-08 12:50:09 +02:00
2015-03-28 16:12:03 -04:00
2015-03-23 12:17:58 +01:00
2015-03-23 12:17:58 +01:00
2015-05-15 13:28:11 +02:00
2015-03-23 12:17:58 +01:00

xdg-app

xdg-app is a system for building, distributing and running sandboxed desktop applications on Linux.

See https://wiki.gnome.org/Projects/SandboxedApps for more information.

Description
No description provided
Readme 101 MiB
Languages
C 90.9%
Shell 5.3%
Python 1.8%
Meson 1.1%
Yacc 0.8%