Repository navigation

round14: Linux sandbox nested allow (CI proof) - #2

Merged

lpalbou merged 10 commits into

mainfrom

round14/2026-10-07

Oct 8, 2026

Merged

round14: Linux sandbox nested allow (CI proof)#2
lpalbou merged 10 commits into
mainfrom
round14/2026-10-07

Commits on Oct 6, 2026
- R14.1: Linux bwrap sandbox binds an allowed child after masking its refused parent (masks remounted read-only after every mount); Landlock child-of-refused-parent test; CI asserts 10 Linux cases
  lpalbou
  committed
  14124a2
- R14.1: browser_probe serves local pages from a scoped loopback origin (never file://): only files the run's sandbox stamp can read (sandbox.path_readable, most-specific-row rule), file:// and out-o…
  lpalbou
  committed
  0f3582a
Commits on Oct 7, 2026