Skip to content

Pull requests: google/nsjail

New pull request New
31 Open 152 Closed
31 Open 152 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

cgroup2: enforce memsw-only limits when memory.max is unset
#342 opened Sep 16, 2026 by TUYU-42 Loading…
1
Add security hardening notes: pidfd proposal, unotify observational limits
#341 opened Sep 14, 2026 by Mohamed-elnady Loading…
Add ASan+UBSan build target, libFuzzer harnesses (nstun, kafel), CI fuzz-smoke workflow
#340 opened Sep 14, 2026 by Mohamed-elnady Loading…
Add compiler hardening (Full RELRO, stack protector, FORTIFY_SOURCE)
#339 opened Sep 14, 2026 by Mohamed-elnady Loading…
1
mnt: fail closed when applying new-API mount flags
#338 opened Sep 14, 2026 by atharvmantri Loading…
1
2
config: Fix overflow in rlimit unit conversion
#337 opened Sep 13, 2026 by HazEOskA Loading…
logs: refuse symlink log targets
#336 opened Sep 13, 2026 by ManyGlue0 Loading…
1
util: add optional -fbounds-safety annotation for readFromFd
#335 opened Sep 11, 2026 by LaptopsPlural Loading…
2 tasks
mnt: fail closed when explicit security mount flags cannot be applied
#334 opened Sep 11, 2026 by HazEOskA Loading…
nstun: preserve bounds in selected network buffer paths with std::span
#333 opened Sep 11, 2026 by YuvalFradkin1 Loading…
1
contain: fail closed when setpriority fails
#332 opened Sep 10, 2026 by HazEOskA Loading…
1
mnt: keep locked mount flags when remounting the jail root read-only
#330 opened Sep 10, 2026 by sanil18 Loading…
mnt: new mount API backend ignores a mount's source under --chroot /
#329 opened Sep 10, 2026 by sanil18 Loading…
contain: fail closed on incomplete file descriptor cleanup
#328 opened Sep 10, 2026 by canbolayir Loading…
mnt: reject untrusted staging work directories
#327 opened Sep 10, 2026 by mcc0nnell Loading…
nstun: avoid unaligned network address loads
#326 opened Sep 10, 2026 by mcc0nnell Loading…
mnt: anchor legacy mount destinations to an O_NOFOLLOW parent fd
#325 opened Sep 6, 2026 by artemkulyk Loading…
cpu: fail closed when --max_cpus exceeds available CPUs
#324 opened Sep 3, 2026 by h1-mrz Contributor Loading…
1
logs: refuse symlinks when opening the log file (O_NOFOLLOW)
#323 opened Sep 3, 2026 by h1-mrz Contributor Loading…
1
tests: build and run path_containment_test
#322 opened Sep 1, 2026 by andreeapid Loading…
1
nstun/tcp: drop guest packets received before the handshake completes
#321 opened Sep 1, 2026 by andreeapid Loading…
1
user: fail closed if supplementary groups survive a denied setgroups
#320 opened Sep 1, 2026 by andreeapid Loading…
1
mnt: re-flag every submount of a recursive bind
#319 opened Sep 1, 2026 by andreeapid Loading…
1
cmdline: reject inconsistent cgroup memory limits
#318 opened Aug 31, 2026 by samuelgirmametaferia Loading…
1
nstun: validate ICMP reply peers
#317 opened Aug 30, 2026 by samuelgirmametaferia Loading…
1
ProTip! What’s not been updated in a month: updated:<2026-08-17.