Skip to content

Releases: wrr/drop

Release 0.1.6

18 May 09:19
@wrr wrr

Choose a tag to compare

  • Use ~ instead of absolute home dir paths for mount entries in
    automatically generated environment-specific TOML config files
  • Update to go compiler version 1.26.30

Release 0.1.5

24 Apr 08:01
@wrr wrr

Choose a tag to compare

  • Graceful shutdown when Drop parent process is killed with catchable
    terminating signal. Ensures temporary files are cleaned.
  • Robust protections against CVE-2019-5736-style /proc/self/exe
    replacement. Always uses trusted /usr/bin/env to execute sandboxed
    programs, ensures /usr/bin/env is not writeable by the current user.

Release 0.1.4

17 Apr 07:58
@wrr wrr

Choose a tag to compare

  • Update to Go 1.26.2
  • Polish error messages and help texts, use consistent form for error reporting
  • Use 'nodev' flag for all mounted dirs, use 'nosuid' for /tmp. This
    is just in case, as sandboxed processes already did not have
    capabilities to create devices or create suid binaries in /tmp.

Release 0.1.3

23 Mar 12:21
@wrr wrr

Choose a tag to compare

Changes:

  • Use sandboxed processes PATH instead of the original host PATH to lookup the executables
  • Support version detection when Drop is installed with 'go install'
  • Polish help strings

Release 0.1.2

19 Mar 08:57
@wrr wrr

Choose a tag to compare

The first Drop public release