Merge pull request #9 from haha-business/iliana/dev

add lower-level memfd API; handle newer Linux functionality

Author: iliana

.github/workflows/test.yml

@@ -7,10 +7,10 @@ on:
   merge_group:
 jobs:
   test:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v2
       - run: rustup update stable
       - run: cargo fmt -- --check
-      - run: cargo clippy -- -D warnings
+      - run: cargo clippy --all-targets -- -D warnings
       - run: cargo test

CHANGELOG.md

@@ -5,8 +5,20 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
+### Added
+- `SealOptions`, an interface for directly creating and sealing anonymous files outside the context
+  of executing them
+
+### Fixed
+- Creating executable anonymous files works correctly since Linux 6.3 when the sysctl
+  `vm.memfd_noexec = 1` is set
+- `is_sealed` correctly handles the presence of additional seals (e.g. `F_SEAL_FUTURE_WRITE` since
+  Linux 5.1 or `F_SEAL_EXEC` since Linux 6.3)
+
 ### Changed
-- `is_sealed` correctly handles the presence of additional seals (e.g. `F_SEAL_FUTURE_WRITE` since Linux 5.1)
+- `SealedCommand` and `execute_sealed` set `F_SEAL_EXEC` on Linux 6.3 and newer
+- Moved source repository to <https://github.com/haha-business/pentacle>
+- Minimum supported Rust version (MSRV) now 1.59.0
 
 ## [1.0.0] - 2020-09-29
 ### Changed

Cargo.lock

@@ -1,18 +1,18 @@
 [package]
 name = "pentacle"
 version = "1.0.0"
-authors = ["iliana destroyer of worlds <[email protected]>"]
-edition = "2018"
-exclude = [".github", ".gitignore"]
+edition = "2021"
+rust-version = "1.59"
 description = "Executes programs as sealed anonymous files on Linux"
-repository = "https://github.com/iliana/pentacle"
 readme = "README.md"
-keywords = ["command", "exec", "memfd", "memfd_create", "seal"]
+repository = "https://github.com/haha-business/pentacle"
 license = "MIT"
+keywords = ["command", "exec", "memfd", "memfd_create", "seal"]
+exclude = [".github", ".gitignore"]
 
 [dependencies]
-libc = "0.2"
-log = "0.4"
+libc = "0.2.153"
+log = "0.4.4"
 
 [package.metadata.docs.rs]
 # https://docs.rs/about/metadata