skylar taylor-barrick 2f52ae5c7e Sandbox: refuse fcntl's asynchronous notification on Linux (#3846) ...

* Sandbox: refuse fcntl's asynchronous notification on Linux

* Sandbox: tests for fcntl's notification rules and the new probe

* Sandbox: the socket ioctls that notify another process, too

2026-11-14 21:12:49 -06:00

..

src

check, xtask stats: visited directories keyed by (dev, inode); stats reads only regular files (#3287)

2026-11-11 16:09:17 -05:00

tests/it

Sandbox: refuse fcntl's asynchronous notification on Linux (#3846)

2026-11-14 21:12:49 -06:00

Cargo.toml

Sandbox: a crate that runs a helper program confined (Landlock and seccomp on Linux, sandbox-exec on macOS)

2026-11-11 07:31:42 +01:00