3 Commits

Author	SHA1	Message	Date
Aleksa Sarai	627054d246	lint/revive: add package doc comments ... This silences all of the "should have a package comment" lint warnings from golangci-lint. Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>	2025-10-03 15:17:43 +10:00
Aleksa Sarai	559bd4ebdf	libcontainer: rename dmz -> exeseal ... The "dmz" name was originally used because the libcontainer/dmz package housed the runc-dmz binary, but since we removed it in commit 871057d863 ("drop runc-dmz solution according to overlay solution") the name is an anachronism and we should just give it a more self-explanatory name. So, call it libcontainer/exeseal because the purpose of the package is to provide tools to seal /proc/self/exe against attackers. Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>	2025-02-25 13:46:05 +11:00
Aleksa Sarai	b9a4727f54	contrib: memfd-bind: add helper for memfd-sealed-bind trick ... This really isn't ideal but it can be used to avoid the largest issues with the memfd-based runc binary protection. There are several caveats with using this tool, see the help page for the new binary for details. Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>	2023-09-22 15:38:20 +10:00