psx 0.1.1.1

• Remove -Wl,-undefined,__wrap_sigfillset from link options.

landlock 0.2.1.1

• Extend API documentation with links to man-pages.

psx 0.1.1.0

• Support GHC 9.4.2 / base ^>=4.17.

• Rely on _POSIX_C_SOURCE >= 1 instead of _GNU_SOURCE as feature test macro for sigset_t in hs-psx.c.

• Use capi foreign imports instead of ccall using the CApiFFI language extension.

• Include a Setup.hs file.

• Minor stylistic changes to Cabal package description file.

• Add a Cabal flag, werror, to enable compiler -Werror and friends.

landlock 0.2.1.0

• Use vendored linux/landlock.h instead of system-provided header during
  build.

• Support Landlock ABI v2 and LANDLOCK_ACCESS_FS_REFER as part of it.

• Support Landlock ABI v3 and LANDLOCK_ACCESS_FS_TRUNCATE as part of it.

• Support GHC 9.4.2 / base ^>=4.17.

• Support unix ^>=2.8.

• Add a new executable,landlocked, which permits to run a command in a sandboxed environment.

• Add a flag, landlocked, which allows to not build the landlocked executable.

• Use capi foreign imports instead of ccall using the CApiFFI language extension.

• Add a Cabal flag, werror, to enable compiler -Werror and friends.

psx 0.1.0.0

First version. Released on an unsuspecting world.

landlock 0.2.0.1

This is, code-wise, the same as version 0.2.0.0, but since said release was incorrectly uploaded to Hackage, a new version is needed.

landlock 0.2.0.0

• Support base ^>=4.15 and base ^>=4.16, tested in CI using GHC 9.0.2 and GHC 9.2.2.

• Add a dependency on psx to avoid setxid-style security issues.

  See test/ThreadedScenario.hs for a scenario which triggers the aforementioned security issue, which needs a Glibc setxid-style work-around. This scenario is executed by the new landlock-test-threaded test-suite.

  See #9 for more background.

landlock 0.1.0.0

First version. Released on an unsuspecting world.