v1.1.0

Added

• SealOptions, an interface for directly creating and sealing anonymous files outside the context of executing them

Fixed

• Creating executable anonymous files works correctly since Linux 6.3 when the sysctl vm.memfd_noexec = 1 is set
• is_sealed correctly handles the presence of additional seals (e.g. F_SEAL_FUTURE_WRITE since Linux 5.1 or F_SEAL_EXEC since Linux 6.3)

Changed

• SealedCommand and execute_sealed set F_SEAL_EXEC on Linux 6.3 and newer
• log is now an optional dependency (remains enabled by default)
• Log messages use symbolic names for syscall values
• Moved source repository to https://github.com/haha-business/pentacle
• Minimum supported Rust version (MSRV) now 1.59.0

v1.0.0

Changed

• Set argv[0] to the original argv[0] in ensure_sealed
• Minimum supported Rust version (MSRV) now 1.45.0