amadan
zdd-2-containment
docs/superpowers/plans/CODEX-FINDINGS-ZDD-IMPL-2-R2.md
+58 −0
docs/superpowers/plans/CODEX-FINDINGS-ZDD-IMPL-2-R2.mdLoading diff…
docs/superpowers/plans/CODEX-FINDINGS-ZDD-IMPL-2.md
+105 −0
docs/superpowers/plans/CODEX-FINDINGS-ZDD-IMPL-2.mdLoading diff…
internal/activator/backend_exec.go
+78 −16
internal/activator/backend_exec.goLoading diff…
internal/activator/backend_unit.go
+18 −0
internal/activator/backend_unit.goLoading diff…
internal/activator/claimspawn.go
+17 −0
internal/activator/claimspawn.goLoading diff…
internal/activator/claimspawn_test.go
+37 −0
internal/activator/claimspawn_test.goLoading diff…
internal/activator/containment.go
+208 −0
internal/activator/containment.goLoading diff…
internal/activator/containment_test.go
+275 −0
internal/activator/containment_test.goLoading diff…
internal/activator/control.go
+15 −0
internal/activator/control.goLoading diff…
internal/activator/prepare.go
+47 −11
internal/activator/prepare.goLoading diff…
internal/activator/unitproc.go
+94 −11
internal/activator/unitproc.goLoading diff…
internal/activator/unitproc_gen_test.go
+346 −0
internal/activator/unitproc_gen_test.goLoading diff…
internal/activator/unitproc_test.go
+4 −2
internal/activator/unitproc_test.goLoading diff…
internal/cgroup/cgroup.go
+36 −15
internal/cgroup/cgroup.goLoading diff…
internal/cgroup/cleanup_linux.go
+139 −13
internal/cgroup/cleanup_linux.goLoading diff…
internal/cgroup/cleanup_linux_test.go
+127 −0
internal/cgroup/cleanup_linux_test.goLoading diff…
internal/cgroup/cleanup_other.go
+8 −0
internal/cgroup/cleanup_other.goLoading diff…
internal/cgroup/gen.go
+200 −0
internal/cgroup/gen.goLoading diff…
internal/cgroup/gen_kernel_linux_test.go
+479 −0
internal/cgroup/gen_kernel_linux_test.goLoading diff…
internal/cgroup/gen_test.go
+277 −0
internal/cgroup/gen_test.goLoading diff…
internal/cgroup/role_linux.go
+14 −55
internal/cgroup/role_linux.goLoading diff…
internal/cgroup/role_linux_test.go
+33 −0
internal/cgroup/role_linux_test.goLoading diff…
internal/cgroup/strict_gen_linux.go
+265 −0
internal/cgroup/strict_gen_linux.goLoading diff…
internal/cgroup/strict_gen_linux_test.go
+213 −0
internal/cgroup/strict_gen_linux_test.goLoading diff…
internal/cgroup/strict_linux.go
+29 −4
internal/cgroup/strict_linux.goLoading diff…
internal/cgroup/strict_other.go
+6 −0
internal/cgroup/strict_other.goLoading diff…
internal/host/claimunit.go
+2 −2
internal/host/claimunit.goLoading diff…
internal/host/claimunit_test.go
+1 −1
internal/host/claimunit_test.goLoading diff…
internal/host/host_test.go
+1 −0
internal/host/host_test.goLoading diff…
internal/host/metrics_probes.go
+14 −1
internal/host/metrics_probes.goLoading diff…
internal/host/metrics_probes_test.go
+35 −0
internal/host/metrics_probes_test.goLoading diff…
internal/host/units/carlos-instance-control.service
+3 −1
internal/host/units/carlos-instance-control.serviceLoading diff…
internal/host/units/carlos-instance-gen@.service
+149 −0
internal/host/units/carlos-instance-gen@.serviceLoading diff…
internal/host/units_hardening_test.go
+3 −3
internal/host/units_hardening_test.goLoading diff…
internal/host/units_isolation_test.go
+32 −3
internal/host/units_isolation_test.goLoading diff…
internal/instancectl/client.go
+47 −0
internal/instancectl/client.goLoading diff…
internal/instancectl/gen.go
+325 −0
internal/instancectl/gen.goLoading diff…
internal/instancectl/hardening.go
+6 −5
internal/instancectl/hardening.goLoading diff…
internal/instancectl/names.go
+108 −0
internal/instancectl/names.goLoading diff…
internal/instancectl/names_gen_test.go
+123 −0
internal/instancectl/names_gen_test.goLoading diff…
internal/instancectl/server.go
+67 −12
internal/instancectl/server.goLoading diff…
internal/instancectl/server_gen_test.go
+453 −0
internal/instancectl/server_gen_test.goLoading diff…
internal/instanceexec/exec.go
+44 −2
internal/instanceexec/exec.goLoading diff…
internal/instanceexec/exec_test.go
+87 −0
internal/instanceexec/exec_test.goLoading diff…
internal/instanceexec/exit.go
+6 −2
internal/instanceexec/exit.goLoading diff…
internal/instanceexec/exit_test.go
+22 −0
internal/instanceexec/exit_test.goLoading diff…
internal/stopevidence/evidence.go
+5 −1
internal/stopevidence/evidence.goLoading diff…