Gitiles
Code Review
Sign In
gerrit-public.fairphone.software
/
platform
/
external
/
minijail
/
1e4fc6aa398673096ed202fccee8be977f9e3c2b
1e4fc6a
Allow minijail to run statically linked targets
by Lee Campbell
· 10 years ago
11af062
Allow mounting of a tmpfs /tmp in the chroot
by Lee Campbell
· 10 years ago
18d1eba
Fix error reporting when sandboxed process is signaled.
by Jorge Lucangeli Obes
· 11 years ago
4ae30cc
Clarify comments around minijail_pre{enter|exec}().
by Jorge Lucangeli Obes
· 11 years ago
fc42060
minijail: Fix issues when compiling for mipsel-o32.
by Ben Chan
· 11 years ago
25db693
Add 'set noparent' to Minijail OWNERS file.
by Jorge Lucangeli Obes
· 11 years ago
4e48065
Fix minijail_change_{user|group} with invalid users/groups.
by Jorge Lucangeli Obes
· 11 years ago
4b2d5ee
Exit if unable to dlopen() libminijailpreload.so.
by Jorge Lucangeli Obes
· 11 years ago
88f76a7
Permit minijail0 callers to act as init to jailed processes
by Christopher Wiley
· 11 years ago
fccb4c9
port to more arches
by Mike Frysinger
· 11 years ago
02d0654
minijail: fix undefined inline function error under clang.
by Yunlian Jiang
· 11 years ago
c420a26
minijail: add child PID to log messages
by mukesh agrawal
· 11 years ago
2203d3e
minijail: do not use gcc designator extension.
by Yunlian Jiang
· 12 years ago
3adfef7
capabilities: extract the max cap from the runtime system
by Mike Frysinger
· 12 years ago
d96baf4
Add "unconditional errno" support to syscall filter policies.
by Jorge Lucangeli Obes
· 12 years ago
6c08630
[minijail] support network namespacing
by Elly Fong-Jones
· 12 years ago
6d71785
[minijail] check permissions on target
by Elly Fong-Jones
· 12 years ago
339a113
Allow reading the jailed process' stdout and stderr.
by Jorge Lucangeli Obes
· 12 years ago
e5609ac
capabilities: correct the <<-operator width everwhere
by Kees Cook
· 12 years ago
323878a
capabilities: make sure that CAP_SETPCAP is cleared
by Kees Cook
· 12 years ago
b0cea43
Unalias |policy| variable in syscall filter code.
by Jorge Lucangeli Obes
· 12 years ago
8a56ec2
Fix Minijail x32 compilation.
by Jorge Lucangeli Obes
· 12 years ago
f65c9fe
[minijail] stop parsing at first non-opt arg
by Elly Fong-Jones
· 12 years ago
1530b74
Add exit status reporting to Minijail.
by Jorge Lucangeli Obes
· 12 years ago
66cfc14
Add support for checking flags in syscall arguments in Minijail.
by Jorge Lucangeli Obes
· 12 years ago
ffec891
Add BPF jset instruction support to Minijail.
by Jorge Lucangeli Obes
· 12 years ago
eee3155
Make it easier to build libminijail on Chromium Linux.
by Lei Zhang
· 12 years ago
6537a56
Minijail: Fix indentation in libminijail.c
by Jorge Lucangeli Obes
· 12 years ago
df4bd35
Minijail: allow writing to the child process' standard input.
by Jorge Lucangeli Obes
· 12 years ago
aff8fae
Minijail: remove libsyscalls.gen.o from test-clean target.
by Jorge Lucangeli Obes
· 12 years ago
275b07f
Minijail: add better error reporting when including an invalid syscall.
by Jorge Lucangeli Obes
· 12 years ago
6201cf5
Minijail: with no_new_privs, drop privileges before setting seccomp filter.
by Jorge Lucangeli Obes
· 12 years ago
bda833c
Minijail: add logging for seccomp filter failures.
by Jorge Lucangeli Obes
· 12 years ago
a6b034d
Minijail: extract utility functions.
by Jorge Lucangeli Obes
· 12 years ago
224e427
Refactor logging in Minijail.
by Jorge Lucangeli Obes
· 12 years ago
2625bba
Fix Minijail's getopt string.
by Jorge Lucangeli Obes
· 12 years ago
1c888ae
[minijail] document use of NO_NEW_PRIVS
by Elly Jones
· 12 years ago
6135db9
Don't crash when receiving a NULL policy file.
by Jorge Lucangeli Obes
· 12 years ago
6a82437
minijail: Support ARM private system calls in seccomp filter policy.
by Ben Chan
· 12 years ago
0341d6c
Fix "-n" option in Minijail.
by Jorge Lucangeli Obes
· 12 years ago
0118059
Replace duplicated RET_KILL code with existing function.
by Jorge Lucangeli Obes
· 12 years ago
a05d7bb
[minijail] don't forget to enter pid namespace
by Elly Jones
· 12 years ago
761b741
[minijail] handle non-namespaced multithreaded use.
by Elly Jones
· 12 years ago
c4ff83e
Add jorgelo@chromium to Minijail OWNERS file.
by Jorge Lucangeli Obes
· 13 years ago
474ee71
Re-enable setting seccomp filters in Minijail.
by Jorge Lucangeli Obes
· 13 years ago
c2c9bcc
Add API for PR_SET_NO_NEW_PRIVS and set seccomp filter before dropping root.
by Jorge Lucangeli Obes
· 13 years ago
524c040
Integrate BPF seccomp_filters to Minijail.
by Jorge Lucangeli Obes
· 13 years ago
d446726
Add full seccomp BPF filter generation.
by Jorge Lucangeli Obes
· 13 years ago
edb1d8e
Update Minijail syscall filter unit tests to work on 32 bits.
by Jorge Lucangeli Obes
· 13 years ago
2343d83
Temporarily disable setting seccomp filters in Minijail.
by Jorge Lucangeli Obes
· 13 years ago
fc8ab53
Add syscall filter BPF program generator.
by Jorge Lucangeli Obes
· 13 years ago
9807d03
Add minijail_run_pid() to return the pid of the jailed child process.
by Jorge Lucangeli Obes
· 13 years ago
dd3e851
[minijail] document an apparent use-after-free
by Elly Jones
· 13 years ago
fdd5f2d
[minijail] fix usage docs
by Elly Jones
· 13 years ago
e58176c
[minijail] pid namespace implies vfs namespace
by Elly Jones
· 13 years ago
a105963
minijail0: honor readonly bind mounts
by Elly Jones
· 13 years ago
6c1d8a4
minijail: remove C++ implementation
by Elly Jones
· 13 years ago
5ba42b5
minijail0: parse *all* the arguments!
by Elly Jones
· 13 years ago
3cb9f61
libminijail_unittests: add more for consume*
by Will Drewry
· 13 years ago
f229050
test_harness.h: Explain failure on terminal signal
by Will Drewry
· 13 years ago
6ac9112
Makefile, libminijail: Invert symbol visibility to allow sane unittesting
by Will Drewry
· 13 years ago
bee7ba7
libminijail.c: fix dangling pointer evaluation on unmarshal error
by Will Drewry
· 13 years ago
463c27a
libminijail_unittest: fix unittests for consumestr
by Will Drewry
· 13 years ago
b5d537d
update Makefile to use a LIBDIR variable to locate the preload library
by Sonny Rao
· 13 years ago
cc6ab27
minijail: add OWNERS.
by Elly Jones
· 13 years ago
dc69108
Revert "update Makefile to accept a LIBDIR variable to specify where libraries go"
by David James
· 13 years ago
afe66e8
update Makefile to accept a LIBDIR variable to specify where libraries go
by Sonny Rao
· 13 years ago
a8d1e1b
minijail0: unbreak chroot and marshalling
by Elly Jones
· 13 years ago
1d69793
libminijail: Fix minijail_parse_seccomp_filters to ignore comment lines.
by Ben Chan
· 13 years ago
51a5b6c
minijail0: add chroot support.
by Elly Jones
· 13 years ago
e1749eb
minijail0: convert to linux style
by Elly Jones
· 13 years ago
decdfdc
libminijail_unittest: add some tests
by Will Drewry
· 13 years ago
7bb008f
minijail: add a C test harness
by Will Drewry
· 13 years ago
e805d37
libminijail: pass-through errno should be negative
by Kees Cook
· 13 years ago
eb300c5
minijail0: make jail_change_{user,group} reentrant.
by Elly Jones
· 13 years ago
c6c8643
libminijail: only clear supplemental groups on user/group change
by Will Drewry
· 13 years ago
f89aef5
libminijail: add seccomp_filter support to LD_PRELOAD + cleanup
by Will Drewry
· 13 years ago
fe4a372
libminijail: move over to using marshalled binary for preload
by Will Drewry
· 13 years ago
2ddaad0
libminijail: add marshalling and scrubbing functions
by Will Drewry
· 13 years ago
2f54b6a
minijail0: move ld_preload communication to a pipe
by Will Drewry
· 13 years ago
32ac9f5
libminijail,minijail0: add seccomp filter support
by Will Drewry
· 13 years ago
f0ef52e
Revert "libminijail,minijail0: add seccomp filter support"
by Thieu Le
· 13 years ago
13dcc70
libminijail,minijail0: add seccomp filter support
by Will Drewry
· 13 years ago
541c7e5
minijail: Restore original value of LD_PRELOAD after fork.
by Ben Chan
· 13 years ago
6f47038
minijail: Pass gid option through libminijailpreload.
by Ben Chan
· 13 years ago
4539701
minijail: Add Makefile target to compile libminijail.so
by Ben Chan
· 13 years ago
bd18762
minijail: remove 'install' target.
by Elly Jones
· 13 years ago
cd7a904
RFC: minijail: add libminijail.
by Elly Jones
· 13 years ago
1251242
minijail: accept named uid/gid.
by Elly Jones
· 13 years ago
b1b4626
minijail: return change_gid_ from change_gid(), not change_uid_.
by Elly Jones
· 13 years ago
376d4ef
minijail: unmount /proc, then mount
by Elly Jones
· 13 years ago
fcd73d4
[minijail] Roll forward to new libchrome
by Chris Masone
· 14 years ago
4463bea
[minijail] Add the ability to set capabilities from the command line
by Chris Masone
· 14 years ago
7b634ba
[minijail] Update to new libchrome API
by Chris Masone
· 14 years ago
a429949
Add LICENSE file
by J. Richard Barnette
· 14 years ago
13603c9
Update Watchlists
by Anush Elangovan
· 14 years ago
1c3f7bd
Setup code review inheritance
by Anush Elangovan
· 14 years ago
9923eb0
build: Restore make_tests.sh scripts.
by Daniel Erat
· 15 years ago
24df18b
build: Delete files from the previous build system.
by Daniel Erat
· 15 years ago
6b195b4
waitpid() on the child process when changing namespaces
by Will Drewry
· 15 years ago
Next »