viyatb-oai 8896ca0ee6 fix(linux-sandbox): block io_uring syscalls in no-network seccomp policy (#10814) ...

## Summary

- Add seccomp deny rules for `io_uring` syscalls in the Linux sandbox
network policy.
- Specifically deny:
  - `SYS_io_uring_setup`
  - `SYS_io_uring_enter`
  - `SYS_io_uring_register`

8896ca0ee6 · 2026-02-06 11:00:54 -08:00

History

..

bwrap.rs

feat(linux-sandbox): add bwrap support (#9938)

2026-02-04 11:13:17 -08:00

landlock.rs

fix(linux-sandbox): block io_uring syscalls in no-network seccomp policy (#10814)

2026-02-06 11:00:54 -08:00

lib.rs

feat(linux-sandbox): vendor bubblewrap and wire it with FFI (#10413)

2026-02-02 23:33:46 -08:00

linux_run_main.rs

feat(linux-sandbox): add bwrap support (#9938)

2026-02-04 11:13:17 -08:00

main.rs

fix: overhaul how we spawn commands under seccomp/landlock on Linux (#1086)

2025-05-23 11:37:07 -07:00

vendored_bwrap.rs

feat(linux-sandbox): add bwrap support (#9938)

2026-02-04 11:13:17 -08:00