v0.3.0

Features

• profile: Env and --env copy named variables into the sandbox (851d3fe)
• profile: Inherit the environment by default, deny_env and allow_env with globs (8f60e86)
• profile: Deny_env removes variables from the service manager's environment (374c955)

v0.2.0

Features

• config: Regex and command-line match patterns, replace = ["match"] (916af9f)
• broker: A matched profile saying delegable = false stops a delegated run (1242645)
• examples: Cargo-install matches cargo install and binstall on its own (7f120b0)
• examples: Npm-publish matches npm publish, cargo-install covers install-update (208a8a9)
• examples: Npm-publish becomes npm-auth, covering npm login too (d6d07cb)
• cli: --fs-hide, --fs-read and --fs-write change file access for one run (26f9be4)

Bug fixes

• policy: Mount scudo-bpfd's socket into the sandbox on its own (253434d)
• profile: A variable inside a path component is not made absolute (904a10a)
• filesystem: Grants inside directories the unit replaces are bind mounts (dc45e8b)

Documentation

• Note that scudo-bpfd.socket must be enabled for network filtering and reports (3e59cf7)
• Keep the documentation on main, and publish it when a version is tagged (1c6ce97)

Tests

• examples: Follow npm-publish's rename to npm-auth (de65f47)

v0.1.0

scudo 0.1.0