ian-at-strix b2e036f7c6 Run any command after firewall verbatim, -- included (#6) ...

bpaf always consumes `--`, so `firewall cargo run -- --release` handed
--release to cargo and our --config flags to the program. The CLI is now clap
with one trailing COMMAND argument, which keeps `--`.

Every manager's environment is set on every run, and cargo's and gem's flags
are added when the command is cargo or gem, so `firewall sh -c '…'` is
screened too. Since every command now gets HTTPS_PROXY, HTTPS to hosts that
aren't registries is tunnelled; registry hosts are still refused.

2026-10-12 16:55:27 -04:00

..

main.rs

Various minor QoL changes (message text changes), main.rs & build.sh tidied-up, etc.

2026-09-24 15:09:22 -04:00

probe.rs

Run any command after firewall verbatim, -- included (#6)

2026-10-12 16:55:27 -04:00