yu-i-i
9c5be38261
Sandboxed compiles: adjust clsi-profile
2026-09-22 02:41:37 +02:00
yu-i-i
8c6109a90d
Add 'poll' to clsi seccomp profile, fixes minted. Thanks, David.
2026-09-22 02:41:34 +02:00
Andrew Rumble
645ee30aa9
Merge pull request #30887 from overleaf/ar-give-engagement-modify-institution-manager-capability
...
[web] Allow engagement role to modify institution managers
GitOrigin-RevId: 3fca81ea1aaa1427da62102cb638f0b288e609b2
2026-01-22 09:05:51 +00:00
Brian Gough
e7cc70baf7
Merge pull request #29639 from overleaf/bg-block-clone3-for-docker
...
use docker default seccomp rule for clone3
GitOrigin-RevId: 32a65a2f2262225fafa1ac1a9f8d6f2767c2829c
2025-11-13 09:06:28 +00:00
Brian Gough
43c1ad2b5a
Merge pull request #29618 from overleaf/bg-allow-statx-call-in-clsi-seccomp
...
allow statx and openat2 syscalls in seccomp profile
GitOrigin-RevId: f7d3ae5bb5f2fedcc9e071d70f24baaf13be27f4
2025-11-12 09:05:08 +00:00
Jimmy Domagala-Tang
683ea90f64
Merge pull request #17299 from overleaf/jdt-clsi-allow-getrandom
...
Allow getrandom calls in CLSI
GitOrigin-RevId: 3fcb9239422e25456ef5211248aad4bcd2ec786f
2024-04-05 08:04:09 +00:00
Henry Oswald
9eb3b0b221
add epoll_pwait to secomp profile
...
Last year golang changed from epoll_wait to epoll_pwait https://github.com/golang/go/issues/23750
This causes golang panic errors on mac when running secomp secure compiles using docker 18.09.1. It may start to become a problem on linux where we are running on 17.03.2-ce in production.
2019-01-24 12:30:37 +00:00
Henry Oswald
ae84777c94
add time secomp
2018-08-21 18:56:53 +01:00
Henry Oswald
c4e8d76427
added seccomp
2018-06-26 12:43:47 +01:00
yu-i-i