Log - ec0a2c1023801b875fed9eb514eb29207d657e3f - platform/external/minijail

ec0a2c1 minijail: Allow skipping setting securebits when restricting caps by Luis Hector Chavez · 7 years ago
fe5fb8e minijail: Add support for dropping caps with static binaries by Luis Hector Chavez · 7 years ago
0f72ef4 Add the ability to set rlimits on the jailed process by Dylan Reid · 7 years ago
b9a7b16 support creating new uts namespaces (and setting hostnames) by Mike Frysinger · 7 years ago
dba6209 Reland "Add optional signal forwarder and '-z' option to cli" by Jorge Lucangeli Obes · 7 years ago
7151582 Revert "Add optional signal forwarder and '-z' option to cli" by Roozbeh Pournader · 7 years ago
74b9027 Add optional signal forwarder and '-z' option to cli by Graziano Misuraca · 7 years ago
f6058c3 Fix prctl() call. by Jorge Lucangeli Obes · 7 years ago
a6eb21a Implement initial ambient capabilities support. by Jorge Lucangeli Obes · 7 years ago
0b20877 Refactor Minijail in preparation for ambient capabilities work. by Jorge Lucangeli Obes · 7 years ago
866bb3a Add a flag to drop access to the session keyring by Chirantan Ekbote · 7 years ago
ab9eb44 allow specifying larger /tmp tmpfs mounts by Martin Pelikán · 7 years ago
b91d404 add nosuid/nodev/noexec settings to the /tmp mount by Mike Frysinger · 7 years ago
3ba8157 name the /proc mount by Mike Frysinger · 7 years ago
0dce757 fix mode settings on /tmp mount by Mike Frysinger · 7 years ago
eea841b keep error checking style with setgroups logic by Mike Frysinger · 7 years ago
3454319 Clarify, simplify some error messages. by Jorge Lucangeli Obes · 7 years ago
6b190c0 ignore missing /proc/<pid>/setgroups files by Mike Frysinger · 7 years ago
13807cb minijail: Add ability to keep supplementary gids. by Lutz Justen · 7 years ago
457a5e3 Improve error messages. by Jorge Lucangeli Obes · 8 years ago
2449956 Call setgroups(2) only once when changing users. by Jorge Lucangeli Obes · 8 years ago
aa235b9 Create a new session for the jailed process. by Jorge Lucangeli Obes · 8 years ago
7559dfe minijail: bring up loopback interface in new net namespaces by Mike Frysinger · 8 years ago
fb449ab Add a PREUPLOAD.cfg file to enable clang-format by Luis Hector Chavez · 8 years ago
43ff080 Add an option to close all open file descriptors by Luis Hector Chavez · 8 years ago
713f6fb Use SECCOMP_RET_TRAP when setting thread sync. by Jorge Lucangeli Obes · 8 years ago
200299c Allow entering a user namespace with a default gid mapping. by Jorge Lucangeli Obes · 8 years ago
1365061 Add support for SECCOMP_FILTER_FLAG_TSYNC. by Jorge Lucangeli Obes · 8 years ago
4d4b3be Add a function to load seccomp filters from a file descriptor. by Jorge Lucangeli Obes · 8 years ago
937ae7a Merge "Fix return value check of write_pid_to_path" by Treehugger Robot · 8 years ago
db6dab4 Fix return value check of write_pid_to_path by Keshav Santhanam · 8 years ago
963eeec Rename the init process inside PID namespaces. by Jorge Lucangeli Obes · 8 years ago
f205fff Kill the child process before dying. by Jorge Lucangeli Obes · 8 years ago
ab6fa6f Allow entering a user namespace with a default mapping. by Jorge Lucangeli Obes · 8 years ago
565e978 Fix soft-fail on Android. by Jorge Lucangeli Obes · 8 years ago
d906099 Merge "Move code away from libminijail.c." by Treehugger Robot · 8 years ago
7b2e29c Move code away from libminijail.c. by Jorge Lucangeli Obes · 8 years ago
3b2e6e4 Free all strings in minijail_destroy(). by Jorge Lucangeli Obes · 8 years ago
db0bc67 Use clang-format on more files. by Jorge Lucangeli Obes · 8 years ago
a205390 Allow dropping all caps but keeping root on static binaries. by Jorge Lucangeli Obes · 8 years ago
eec7796 Create mount destinations if they don't exist. by Dylan Reid · 8 years ago
81e2397 Allow mount data to be specified by Dylan Reid · 8 years ago
4cbc2a5 Add ability to enter a cgroup namespace by Dylan Reid · 8 years ago
df7fab1 Add logging message when using user namespaces and mount namespaces. by Jorge Lucangeli Obes · 8 years ago
7a56907 Avoid warning about BSD_SOURCE on glibc >= 2.20 by Arthur Gautier · 8 years ago
2413f37 Skip setting seccomp filter when running with ASan. by Jorge Lucangeli Obes · 8 years ago
f783b52 Fix use of SECURE_ALL_BITS/SECURE_ALL_LOCKS. by Jorge Lucangeli Obes · 8 years ago
6b0de9b Fix typo in error message. by Jorge Lucangeli Obes · 8 years ago
097b719 Remove mount points from peer group just before oldroot unmount. by Hidehiko Abe · 8 years ago
87bf01d Re-organize flags in 'minijail_preexec'. by Jorge Lucangeli Obes · 8 years ago
3da4031 Make -K work for dynamically-linked binary. by Shuhei Takahashi · 8 years ago
a521bee Add an option to skip remounting / as MS_PRIVATE. by Jorge Lucangeli Obes · 8 years ago
bce609d Do not leak outside root dir fd into the child. by Ricky Zhou · 8 years ago
7ea269e Don't call cap_get_proc(3) unconditionally. by Jorge Lucangeli Obes · 8 years ago
d8c8205 Always call 'drop_caps'. by Jorge Lucangeli Obes · 8 years ago
f9fcdbe Add support for dropping capabilities from the bounding set. by Jorge Lucangeli Obes · 8 years ago
6c755d2 Don't die() on bind mounts. by Jorge Lucangeli Obes · 8 years ago
2b12ba4 Print an error when attempting to use bind mounts without chroot. by Jorge Lucangeli Obes · 8 years ago
b8a5138 Add 'cgroups' flag. by Jorge Lucangeli Obes · 8 years ago
605ce7f Add ability to put jailed process in cgroups by Dylan Reid · 8 years ago
ce5b55e Separate child process sync from user namespace by Dylan Reid · 8 years ago
272e3ab Fix Minijail build. by Jorge Lucangeli Obes · 8 years ago
c31391e Merge "softfail on older kernels that lack seccomp support" by Jeffrey Vander Stoep · 8 years ago
2885bef softfail on older kernels that lack seccomp support by Jeff Vander Stoep · 8 years ago
bc67f44 Make set_supplementary_gids return 'void'. by Jorge Lucangeli Obes · 8 years ago
fd5fc56 Make set_supplementary_gids abort on memory errors. by Jorge Lucangeli Obes · 8 years ago
4b276a6 Use prctl(PR_CAPBSET_READ) to get the last valid cap on Android. by Jorge Lucangeli Obes · 8 years ago
2860c46 Add support for resetting signal masks by Peter Qiu · 9 years ago
de02a5b Fix marshaling for supplementary gid list. by Jorge Lucangeli Obes · 9 years ago
43e29b3 Add libminijail static library target. by Jorge Lucangeli Obes · 9 years ago
06940be Fix C99 declaration. by Jorge Lucangeli Obes · 9 years ago
cac4fa7 Merge "Free 'suppl_gid_list'." by Jorge Lucangeli Obes · 9 years ago
43a6a86 Fix some long lines. by Jorge Lucangeli Obes · 9 years ago
e81a52f Free 'suppl_gid_list'. by Jorge Lucangeli Obes · 9 years ago
f7a3868 Fix indentation. by Jorge Lucangeli Obes · 9 years ago
d16ac49 Allow setting supplementary GIDs directly. by Jorge Lucangeli Obes · 9 years ago
c2ba9f5 Use size_t for size-related variables. by Jorge Lucangeli Obes · 9 years ago
d0a6e2f Remove unused Minijail flag and make multi-line comments consistent. by Jorge Lucangeli Obes · 9 years ago
f794247 minijail: Add option to enter a new IPC namespace by Dylan Reid · 9 years ago
eac2894 minijail: Support setting syscall table with PR_ALT_SYSCALL by Andrew Bresticker · 9 years ago
648b220 minijail: Add ability to specify mounts by Dylan Reid · 9 years ago
6c7a458 minijail: Remove has_bind_mounts API by Dylan Reid · 9 years ago
a14e08d minijail: Allow static binaries in a bind mount to run by Dylan Reid · 9 years ago
2034274 Remove warning suppressions. by Jorge Lucangeli Obes · 9 years ago
1102f5a minijail: Support entering an existing net namespace. by Dylan Reid · 9 years ago
360f329 Merge "minijail: remove minijail_run_pid_pipe()" by Samuel Tan · 9 years ago
383e91a Merge "minijail: add minijail_run_pid_pipes_no_preload() API function" by Samuel Tan · 9 years ago
63adc1f minijail: remove minijail_run_pid_pipe() by Samuel Tan · 9 years ago
63187f4 minijail: add minijail_run_pid_pipes_no_preload() API function by Samuel Tan · 9 years ago
f682d47 minijail: Read the last valid cap value earlier. by Dylan Reid · 9 years ago
efb697a Merge "Make Minijail work correctly with shared mounts." by Jorge Lucangeli Obes · 9 years ago
805be39 Make Minijail work correctly with shared mounts. by Jorge Lucangeli Obes · 9 years ago
46a5509 Call chdir("/") after chroot in pivot_root. by Jorge Lucangeli Obes · 9 years ago
08946cc minijail: Check correct executable file by Dylan Reid · 9 years ago
5471450 minijail: Refactor dynamic and static code paths. by Jorge Lucangeli Obes · 9 years ago
791f577 minijail: Don't unmount proc if not mounted by Dylan Reid · 9 years ago
e0a530e minijail: use new_root as put_old in pivot_root(2) by Yu-Hsi Chiang · 9 years ago
64d65a7 minijail: Support pivot_root by Yu-Hsi Chiang · 9 years ago
1912c5b minijail: Support multiple range uid/gid mappings. by Yu-Hsi Chiang · 9 years ago
3cc05ea minijail: Support writing child pid to file by Yu-Hsi Chiang · 9 years ago