1. db0bc67 Use clang-format on more files. by Jorge Lucangeli Obes · 8 years ago
  2. a205390 Allow dropping all caps but keeping root on static binaries. by Jorge Lucangeli Obes · 8 years ago
  3. eec7796 Create mount destinations if they don't exist. by Dylan Reid · 8 years ago
  4. 81e2397 Allow mount data to be specified by Dylan Reid · 8 years ago
  5. 4cbc2a5 Add ability to enter a cgroup namespace by Dylan Reid · 8 years ago
  6. df7fab1 Add logging message when using user namespaces and mount namespaces. by Jorge Lucangeli Obes · 8 years ago
  7. 7a56907 Avoid warning about BSD_SOURCE on glibc >= 2.20 by Arthur Gautier · 8 years ago
  8. 2413f37 Skip setting seccomp filter when running with ASan. by Jorge Lucangeli Obes · 8 years ago
  9. f783b52 Fix use of SECURE_ALL_BITS/SECURE_ALL_LOCKS. by Jorge Lucangeli Obes · 8 years ago
  10. 6b0de9b Fix typo in error message. by Jorge Lucangeli Obes · 8 years ago
  11. 097b719 Remove mount points from peer group just before oldroot unmount. by Hidehiko Abe · 8 years ago
  12. 87bf01d Re-organize flags in 'minijail_preexec'. by Jorge Lucangeli Obes · 8 years ago
  13. 3da4031 Make -K work for dynamically-linked binary. by Shuhei Takahashi · 8 years ago
  14. a521bee Add an option to skip remounting / as MS_PRIVATE. by Jorge Lucangeli Obes · 8 years ago
  15. bce609d Do not leak outside root dir fd into the child. by Ricky Zhou · 8 years ago
  16. 7ea269e Don't call cap_get_proc(3) unconditionally. by Jorge Lucangeli Obes · 8 years ago
  17. d8c8205 Always call 'drop_caps'. by Jorge Lucangeli Obes · 8 years ago
  18. f9fcdbe Add support for dropping capabilities from the bounding set. by Jorge Lucangeli Obes · 8 years ago
  19. 6c755d2 Don't die() on bind mounts. by Jorge Lucangeli Obes · 8 years ago
  20. 2b12ba4 Print an error when attempting to use bind mounts without chroot. by Jorge Lucangeli Obes · 8 years ago
  21. b8a5138 Add 'cgroups' flag. by Jorge Lucangeli Obes · 8 years ago
  22. 605ce7f Add ability to put jailed process in cgroups by Dylan Reid · 8 years ago
  23. ce5b55e Separate child process sync from user namespace by Dylan Reid · 8 years ago
  24. 272e3ab Fix Minijail build. by Jorge Lucangeli Obes · 8 years ago
  25. c31391e Merge "softfail on older kernels that lack seccomp support" by Jeffrey Vander Stoep · 8 years ago
  26. 2885bef softfail on older kernels that lack seccomp support by Jeff Vander Stoep · 8 years ago
  27. bc67f44 Make set_supplementary_gids return 'void'. by Jorge Lucangeli Obes · 8 years ago
  28. fd5fc56 Make set_supplementary_gids abort on memory errors. by Jorge Lucangeli Obes · 8 years ago
  29. 4b276a6 Use prctl(PR_CAPBSET_READ) to get the last valid cap on Android. by Jorge Lucangeli Obes · 8 years ago
  30. 2860c46 Add support for resetting signal masks by Peter Qiu · 9 years ago
  31. de02a5b Fix marshaling for supplementary gid list. by Jorge Lucangeli Obes · 9 years ago
  32. 43e29b3 Add libminijail static library target. by Jorge Lucangeli Obes · 9 years ago
  33. 06940be Fix C99 declaration. by Jorge Lucangeli Obes · 9 years ago
  34. cac4fa7 Merge "Free 'suppl_gid_list'." by Jorge Lucangeli Obes · 9 years ago
  35. 43a6a86 Fix some long lines. by Jorge Lucangeli Obes · 9 years ago
  36. e81a52f Free 'suppl_gid_list'. by Jorge Lucangeli Obes · 9 years ago
  37. f7a3868 Fix indentation. by Jorge Lucangeli Obes · 9 years ago
  38. d16ac49 Allow setting supplementary GIDs directly. by Jorge Lucangeli Obes · 9 years ago
  39. c2ba9f5 Use size_t for size-related variables. by Jorge Lucangeli Obes · 9 years ago
  40. d0a6e2f Remove unused Minijail flag and make multi-line comments consistent. by Jorge Lucangeli Obes · 9 years ago
  41. f794247 minijail: Add option to enter a new IPC namespace by Dylan Reid · 9 years ago
  42. eac2894 minijail: Support setting syscall table with PR_ALT_SYSCALL by Andrew Bresticker · 9 years ago
  43. 648b220 minijail: Add ability to specify mounts by Dylan Reid · 9 years ago
  44. 6c7a458 minijail: Remove has_bind_mounts API by Dylan Reid · 9 years ago
  45. a14e08d minijail: Allow static binaries in a bind mount to run by Dylan Reid · 9 years ago
  46. 2034274 Remove warning suppressions. by Jorge Lucangeli Obes · 9 years ago
  47. 1102f5a minijail: Support entering an existing net namespace. by Dylan Reid · 9 years ago
  48. 360f329 Merge "minijail: remove minijail_run_pid_pipe()" by Samuel Tan · 9 years ago
  49. 383e91a Merge "minijail: add minijail_run_pid_pipes_no_preload() API function" by Samuel Tan · 9 years ago
  50. 63adc1f minijail: remove minijail_run_pid_pipe() by Samuel Tan · 9 years ago
  51. 63187f4 minijail: add minijail_run_pid_pipes_no_preload() API function by Samuel Tan · 9 years ago
  52. f682d47 minijail: Read the last valid cap value earlier. by Dylan Reid · 9 years ago
  53. efb697a Merge "Make Minijail work correctly with shared mounts." by Jorge Lucangeli Obes · 9 years ago
  54. 805be39 Make Minijail work correctly with shared mounts. by Jorge Lucangeli Obes · 9 years ago
  55. 46a5509 Call chdir("/") after chroot in pivot_root. by Jorge Lucangeli Obes · 9 years ago
  56. 08946cc minijail: Check correct executable file by Dylan Reid · 9 years ago
  57. 5471450 minijail: Refactor dynamic and static code paths. by Jorge Lucangeli Obes · 9 years ago
  58. 791f577 minijail: Don't unmount proc if not mounted by Dylan Reid · 9 years ago
  59. e0a530e minijail: use new_root as put_old in pivot_root(2) by Yu-Hsi Chiang · 9 years ago
  60. 64d65a7 minijail: Support pivot_root by Yu-Hsi Chiang · 9 years ago
  61. 1912c5b minijail: Support multiple range uid/gid mappings. by Yu-Hsi Chiang · 9 years ago
  62. 3cc05ea minijail: Support writing child pid to file by Yu-Hsi Chiang · 9 years ago
  63. 10e9123 minijail: add user namespace support by Yu-Hsi Chiang · 9 years ago
  64. 3e954ec minijail: Add a new option to allow program run as pid 1. by Yu-Hsi Chiang · 9 years ago
  65. 34e2274 Use libcap on Android. by Jorge Lucangeli Obes · 9 years ago
  66. 5b7a318 Use __ANDROID__ instead of __BRILLO__. by Daniel Erat · 9 years ago
  67. 1b21c8f Use getgrnam_r. by Yabin Cui · 9 years ago
  68. a21c8fc Add 'Android.mk' file, fix compile on Android. by Jorge Lucangeli Obes · 9 years ago
  69. 20ac228 Revert "Add 'Android.mk' file, fix compile on Android." by Jorge Lucangeli Obes · 9 years ago
  70. b9a322d Add 'Android.mk' file, fix compile on Android. by Jorge Lucangeli Obes · 9 years ago
  71. 3c84df1 minijail: Set new process group ID. by Jorge Lucangeli Obes · 9 years ago
  72. d613ab2 minijail: Make copyright headers consistent. by Jorge Lucangeli Obes · 9 years ago
  73. 3901da6 minijail: Allow tmpfs /tmp mount without a chroot. by Jorge Lucangeli Obes · 9 years ago
  74. e6bd8cc Revert "minijail: When pid-namespacing, init should be session leader" by Mike Frysinger · 9 years ago
  75. 67546a0 minijail: When pid-namespacing, init should be session leader by Chris Masone · 9 years ago
  76. 0ef8a66 minijail: add seccomp softfail option by Utkarsh Sanghi · 10 years ago
  77. 1563b5b minijail: Add support for entering an existing VFS namespace. by Jorge Lucangeli Obes · 10 years ago
  78. 2f61ee4 Fix more style issues. by Jorge Lucangeli Obes · 10 years ago
  79. c8b21e1 Fix coding style issues. by Jorge Lucangeli Obes · 10 years ago
  80. 1e4fc6a Allow minijail to run statically linked targets by Lee Campbell · 10 years ago
  81. 11af062 Allow mounting of a tmpfs /tmp in the chroot by Lee Campbell · 10 years ago
  82. 18d1eba Fix error reporting when sandboxed process is signaled. by Jorge Lucangeli Obes · 10 years ago
  83. 4ae30cc Clarify comments around minijail_pre{enter|exec}(). by Jorge Lucangeli Obes · 10 years ago
  84. 4e48065 Fix minijail_change_{user|group} with invalid users/groups. by Jorge Lucangeli Obes · 10 years ago
  85. c420a26 minijail: add child PID to log messages by mukesh agrawal · 11 years ago
  86. 3adfef7 capabilities: extract the max cap from the runtime system by Mike Frysinger · 11 years ago
  87. 6c08630 [minijail] support network namespacing by Elly Fong-Jones · 11 years ago
  88. 339a113 Allow reading the jailed process' stdout and stderr. by Jorge Lucangeli Obes · 11 years ago
  89. e5609ac capabilities: correct the <<-operator width everwhere by Kees Cook · 11 years ago
  90. 323878a capabilities: make sure that CAP_SETPCAP is cleared by Kees Cook · 11 years ago
  91. 1530b74 Add exit status reporting to Minijail. by Jorge Lucangeli Obes · 12 years ago
  92. eee3155 Make it easier to build libminijail on Chromium Linux. by Lei Zhang · 12 years ago
  93. 6537a56 Minijail: Fix indentation in libminijail.c by Jorge Lucangeli Obes · 12 years ago
  94. df4bd35 Minijail: allow writing to the child process' standard input. by Jorge Lucangeli Obes · 12 years ago
  95. 6201cf5 Minijail: with no_new_privs, drop privileges before setting seccomp filter. by Jorge Lucangeli Obes · 12 years ago
  96. bda833c Minijail: add logging for seccomp filter failures. by Jorge Lucangeli Obes · 12 years ago
  97. a6b034d Minijail: extract utility functions. by Jorge Lucangeli Obes · 12 years ago
  98. 224e427 Refactor logging in Minijail. by Jorge Lucangeli Obes · 12 years ago
  99. 1c888ae [minijail] document use of NO_NEW_PRIVS by Elly Jones · 12 years ago
  100. a05d7bb [minijail] don't forget to enter pid namespace by Elly Jones · 12 years ago