Skip to content
Navigation Menu
Sign in
Appearance settings
Platform
AI CODE CREATION
GitHub Copilot
Write better code with AI
GitHub Copilot app
Direct agents from issue to merge
MCP Registry
Integrate external tools
DEVELOPER WORKFLOWS
Actions
Automate any workflow
Codespaces
Instant dev environments
Issues
Plan and track work
Code Review
Manage code changes
Code Quality
Enforce quality at merge
APPLICATION SECURITY
GitHub Advanced Security
Find and fix vulnerabilities
Code security
Secure your code as you build
Secret protection
Stop leaks before they start
EXPLORE
Why GitHub
Documentation
Blog
Changelog
Marketplace
View all features
Solutions
BY COMPANY SIZE
Enterprises
Small and medium teams
Startups
Nonprofits
BY USE CASE
App Modernization
DevSecOps
DevOps
CI/CD
View all use cases
BY INDUSTRY
Healthcare
Financial services
Manufacturing
Government
View all industries
View all solutions
Resources
EXPLORE BY TOPIC
AI
Software Development
DevOps
Security
View all topics
EXPLORE BY TYPE
Customer stories
Events & webinars
Ebooks & reports
Business insights
GitHub Skills
SUPPORT & SERVICES
Documentation
Customer support
Community forum
Trust center
Partners
View all resources
Open Source
COMMUNITY
GitHub Sponsors
Fund open source developers
PROGRAMS
Security Lab
Maintainer Community
Accelerator
GitHub Stars
Archive Program
REPOSITORIES
Topics
Trending
Collections
Enterprise
ENTERPRISE SOLUTIONS
Enterprise platform
AI-powered developer platform
AVAILABLE ADD-ONS
GitHub Advanced Security
Enterprise-grade security features
Copilot for Business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
Uh oh!
There was an error while loading.
Please reload this page
.
openwrt
/
procd
Public
Notifications
You must be signed in to change notification settings
Fork
38
Star
11
Code
Issues
6
Pull requests
6
Actions
Security and quality
0
Insights
Additional navigation options
Code
Issues
Pull requests
Actions
Security and quality
Insights
jail: harden CLONE_NEWUSER handling, fix dependency RPATH/RUNPATH support
- #39
#39
Merged
openwrt-bot
merged 14 commits into
openwrt:main
openwrt/procd:main
from
joshuacov1:ujail-fixes
joshuacov1/procd-ujail-fixes:ujail-fixes
Copy head branch name to clipboard
Aug 15, 2026
Conversation
Commits
14
(14)
Checks
Files changed
Merged
jail: harden CLONE_NEWUSER handling, fix dependency RPATH/RUNPATH support
#39
openwrt-bot
merged 14 commits into
openwrt:main
openwrt/procd:main
from
joshuacov1:ujail-fixes
joshuacov1/procd-ujail-fixes:ujail-fixes
Copy head branch name to clipboard
Commits
Commits on Aug 1, 2026
jail: fix /proc,/sys mounting under CLONE_NEWUSER
Show description for 07e0f7d
joshuacov1
committed
07e0f7d
View commit details
Copy full SHA for 07e0f7d
Browse repository at this point
jail: clear cgroup_path and initialized in cgroups_free
Show description for ae36d7c
joshuacov1
committed
ae36d7c
View commit details
Copy full SHA for ae36d7c
Browse repository at this point
jail: detach inherited mounts under /proc,/sys before mounting own
Show description for a1c5633
joshuacov1
committed
a1c5633
View commit details
Copy full SHA for a1c5633
Browse repository at this point
jail: run inherited-mount detach before joining an external userns
Show description for 3fc9d11
joshuacov1
committed
3fc9d11
View commit details
Copy full SHA for 3fc9d11
Browse repository at this point
jail: validate and bind-mount devices via open_tree and move_mount
Show description for e90164d
joshuacov1
committed
e90164d
View commit details
Copy full SHA for e90164d
Browse repository at this point
Commits on Aug 3, 2026
jail: fix identity resolution under CLONE_NEWUSER
Show description for 835aed0
joshuacov1
committed
835aed0
View commit details
Copy full SHA for 835aed0
Browse repository at this point
jail: tolerate EPERM on remount when flags already satisfied
Show description for f689b10
joshuacov1
committed
f689b10
View commit details
Copy full SHA for f689b10
Browse repository at this point
jail: reject non-read-only OCI bind mounts onto /proc,/sys
Show description for f85a629
joshuacov1
committed
f85a629
View commit details
Copy full SHA for f85a629
Browse repository at this point
jail: mask default sensitive /proc,/sys paths for plain jails
Show description for d381289
joshuacov1
committed
d381289
View commit details
Copy full SHA for d381289
Browse repository at this point
jail: read DT_RPATH/DT_RUNPATH when auto-discovering dependencies
Show description for 5a7cc30
joshuacov1
committed
5a7cc30
View commit details
Copy full SHA for 5a7cc30
Browse repository at this point
jail: tolerate EPERM on setgroups() when joining an external userns
Show description for 285a3e7
joshuacov1
committed
285a3e7
View commit details
Copy full SHA for 285a3e7
Browse repository at this point
Commits on Aug 12, 2026
initd: provide a read-only noafile for ujail path masking
Show description for 5e8ebe8
dangowrt
committed
5e8ebe8
View commit details
Copy full SHA for 5e8ebe8
Browse repository at this point
jail: source deferred file masks from procd's read-only noafile
Show description for 18ed46f
dangowrt
committed
18ed46f
View commit details
Copy full SHA for 18ed46f
Browse repository at this point
initd: log if the noafile lock-down remount fails
Show description for debe838
joshuacov1
committed
debe838
View commit details
Copy full SHA for debe838
Browse repository at this point
You can’t perform that action at this time.
