Releases: wrr/drop
Releases · wrr/drop
Release 0.1.6
Release 0.1.5
- Graceful shutdown when Drop parent process is killed with catchable
terminating signal. Ensures temporary files are cleaned. - Robust protections against CVE-2019-5736-style /proc/self/exe
replacement. Always uses trusted /usr/bin/env to execute sandboxed
programs, ensures /usr/bin/env is not writeable by the current user.
Release 0.1.4
- Update to Go 1.26.2
- Polish error messages and help texts, use consistent form for error reporting
- Use 'nodev' flag for all mounted dirs, use 'nosuid' for /tmp. This
is just in case, as sandboxed processes already did not have
capabilities to create devices or create suid binaries in /tmp.
Release 0.1.3
Changes:
- Use sandboxed processes PATH instead of the original host PATH to lookup the executables
- Support version detection when Drop is installed with 'go install'
- Polish help strings
Release 0.1.2
The first Drop public release