Sign in
android
/
platform
/
external
/
minijail
/
3772d3674bda9b5d0beecb4c689e347ea5ce174b
/
libminijail.c
866bb3a
Add a flag to drop access to the session keyring
by Chirantan Ekbote
· 8 years ago
ab9eb44
allow specifying larger /tmp tmpfs mounts
by Martin Pelikán
· 8 years ago
b91d404
add nosuid/nodev/noexec settings to the /tmp mount
by Mike Frysinger
· 8 years ago
3ba8157
name the /proc mount
by Mike Frysinger
· 8 years ago
0dce757
fix mode settings on /tmp mount
by Mike Frysinger
· 8 years ago
eea841b
keep error checking style with setgroups logic
by Mike Frysinger
· 8 years ago
3454319
Clarify, simplify some error messages.
by Jorge Lucangeli Obes
· 8 years ago
android-n-mr2-preview-1
6b190c0
ignore missing /proc/<pid>/setgroups files
by Mike Frysinger
· 8 years ago
13807cb
minijail: Add ability to keep supplementary gids.
by Lutz Justen
· 8 years ago
457a5e3
Improve error messages.
by Jorge Lucangeli Obes
· 8 years ago
2449956
Call setgroups(2) only once when changing users.
by Jorge Lucangeli Obes
· 8 years ago
aa235b9
Create a new session for the jailed process.
by Jorge Lucangeli Obes
· 8 years ago
7559dfe
minijail: bring up loopback interface in new net namespaces
by Mike Frysinger
· 8 years ago
fb449ab
Add a PREUPLOAD.cfg file to enable clang-format
by Luis Hector Chavez
· 8 years ago
43ff080
Add an option to close all open file descriptors
by Luis Hector Chavez
· 8 years ago
713f6fb
Use SECCOMP_RET_TRAP when setting thread sync.
by Jorge Lucangeli Obes
· 8 years ago
200299c
Allow entering a user namespace with a default gid mapping.
by Jorge Lucangeli Obes
· 8 years ago
1365061
Add support for SECCOMP_FILTER_FLAG_TSYNC.
by Jorge Lucangeli Obes
· 9 years ago
4d4b3be
Add a function to load seccomp filters from a file descriptor.
by Jorge Lucangeli Obes
· 9 years ago
937ae7a
Merge "Fix return value check of write_pid_to_path"
by Treehugger Robot
· 9 years ago
db6dab4
Fix return value check of write_pid_to_path
by Keshav Santhanam
· 9 years ago
963eeec
Rename the init process inside PID namespaces.
by Jorge Lucangeli Obes
· 9 years ago
f205fff
Kill the child process before dying.
by Jorge Lucangeli Obes
· 9 years ago
ab6fa6f
Allow entering a user namespace with a default mapping.
by Jorge Lucangeli Obes
· 9 years ago
565e978
Fix soft-fail on Android.
by Jorge Lucangeli Obes
· 9 years ago
d906099
Merge "Move code away from libminijail.c."
by Treehugger Robot
· 9 years ago
7b2e29c
Move code away from libminijail.c.
by Jorge Lucangeli Obes
· 9 years ago
3b2e6e4
Free all strings in minijail_destroy().
by Jorge Lucangeli Obes
· 9 years ago
db0bc67
Use clang-format on more files.
by Jorge Lucangeli Obes
· 9 years ago
a205390
Allow dropping all caps but keeping root on static binaries.
by Jorge Lucangeli Obes
· 9 years ago
eec7796
Create mount destinations if they don't exist.
by Dylan Reid
· 9 years ago
81e2397
Allow mount data to be specified
by Dylan Reid
· 9 years ago
4cbc2a5
Add ability to enter a cgroup namespace
by Dylan Reid
· 9 years ago
df7fab1
Add logging message when using user namespaces and mount namespaces.
by Jorge Lucangeli Obes
· 9 years ago
android-n-preview-4
7a56907
Avoid warning about BSD_SOURCE on glibc >= 2.20
by Arthur Gautier
· 9 years ago
2413f37
Skip setting seccomp filter when running with ASan.
by Jorge Lucangeli Obes
· 9 years ago
android-n-preview-2
f783b52
Fix use of SECURE_ALL_BITS/SECURE_ALL_LOCKS.
by Jorge Lucangeli Obes
· 9 years ago
6b0de9b
Fix typo in error message.
by Jorge Lucangeli Obes
· 9 years ago
097b719
Remove mount points from peer group just before oldroot unmount.
by Hidehiko Abe
· 9 years ago
87bf01d
Re-organize flags in 'minijail_preexec'.
by Jorge Lucangeli Obes
· 9 years ago
3da4031
Make -K work for dynamically-linked binary.
by Shuhei Takahashi
· 9 years ago
a521bee
Add an option to skip remounting / as MS_PRIVATE.
by Jorge Lucangeli Obes
· 9 years ago
android-n-preview-1
bce609d
Do not leak outside root dir fd into the child.
by Ricky Zhou
· 9 years ago
7ea269e
Don't call cap_get_proc(3) unconditionally.
by Jorge Lucangeli Obes
· 9 years ago
d8c8205
Always call 'drop_caps'.
by Jorge Lucangeli Obes
· 9 years ago
f9fcdbe
Add support for dropping capabilities from the bounding set.
by Jorge Lucangeli Obes
· 9 years ago
6c755d2
Don't die() on bind mounts.
by Jorge Lucangeli Obes
· 9 years ago
2b12ba4
Print an error when attempting to use bind mounts without chroot.
by Jorge Lucangeli Obes
· 9 years ago
b8a5138
Add 'cgroups' flag.
by Jorge Lucangeli Obes
· 9 years ago
605ce7f
Add ability to put jailed process in cgroups
by Dylan Reid
· 9 years ago
ce5b55e
Separate child process sync from user namespace
by Dylan Reid
· 9 years ago
272e3ab
Fix Minijail build.
by Jorge Lucangeli Obes
· 9 years ago
c31391e
Merge "softfail on older kernels that lack seccomp support"
by Jeffrey Vander Stoep
· 9 years ago
2885bef
softfail on older kernels that lack seccomp support
by Jeff Vander Stoep
· 9 years ago
bc67f44
Make set_supplementary_gids return 'void'.
by Jorge Lucangeli Obes
· 9 years ago
fd5fc56
Make set_supplementary_gids abort on memory errors.
by Jorge Lucangeli Obes
· 9 years ago
4b276a6
Use prctl(PR_CAPBSET_READ) to get the last valid cap on Android.
by Jorge Lucangeli Obes
· 9 years ago
2860c46
Add support for resetting signal masks
by Peter Qiu
· 9 years ago
de02a5b
Fix marshaling for supplementary gid list.
by Jorge Lucangeli Obes
· 9 years ago
43e29b3
Add libminijail static library target.
by Jorge Lucangeli Obes
· 9 years ago
brillo-m8-dev
brillo-m8-release
06940be
Fix C99 declaration.
by Jorge Lucangeli Obes
· 9 years ago
cac4fa7
Merge "Free 'suppl_gid_list'."
by Jorge Lucangeli Obes
· 9 years ago
43a6a86
Fix some long lines.
by Jorge Lucangeli Obes
· 9 years ago
e81a52f
Free 'suppl_gid_list'.
by Jorge Lucangeli Obes
· 9 years ago
f7a3868
Fix indentation.
by Jorge Lucangeli Obes
· 9 years ago
d16ac49
Allow setting supplementary GIDs directly.
by Jorge Lucangeli Obes
· 9 years ago
c2ba9f5
Use size_t for size-related variables.
by Jorge Lucangeli Obes
· 9 years ago
d0a6e2f
Remove unused Minijail flag and make multi-line comments consistent.
by Jorge Lucangeli Obes
· 9 years ago
f794247
minijail: Add option to enter a new IPC namespace
by Dylan Reid
· 9 years ago
eac2894
minijail: Support setting syscall table with PR_ALT_SYSCALL
by Andrew Bresticker
· 9 years ago
648b220
minijail: Add ability to specify mounts
by Dylan Reid
· 9 years ago
6c7a458
minijail: Remove has_bind_mounts API
by Dylan Reid
· 9 years ago
a14e08d
minijail: Allow static binaries in a bind mount to run
by Dylan Reid
· 9 years ago
brillo-m7-dev
brillo-m7-mr-dev
brillo-m7-release
2034274
Remove warning suppressions.
by Jorge Lucangeli Obes
· 9 years ago
1102f5a
minijail: Support entering an existing net namespace.
by Dylan Reid
· 9 years ago
360f329
Merge "minijail: remove minijail_run_pid_pipe()"
by Samuel Tan
· 9 years ago
383e91a
Merge "minijail: add minijail_run_pid_pipes_no_preload() API function"
by Samuel Tan
· 9 years ago
63adc1f
minijail: remove minijail_run_pid_pipe()
by Samuel Tan
· 9 years ago
63187f4
minijail: add minijail_run_pid_pipes_no_preload() API function
by Samuel Tan
· 9 years ago
f682d47
minijail: Read the last valid cap value earlier.
by Dylan Reid
· 9 years ago
efb697a
Merge "Make Minijail work correctly with shared mounts."
by Jorge Lucangeli Obes
· 9 years ago
805be39
Make Minijail work correctly with shared mounts.
by Jorge Lucangeli Obes
· 9 years ago
46a5509
Call chdir("/") after chroot in pivot_root.
by Jorge Lucangeli Obes
· 9 years ago
08946cc
minijail: Check correct executable file
by Dylan Reid
· 9 years ago
5471450
minijail: Refactor dynamic and static code paths.
by Jorge Lucangeli Obes
· 9 years ago
791f577
minijail: Don't unmount proc if not mounted
by Dylan Reid
· 9 years ago
e0a530e
minijail: use new_root as put_old in pivot_root(2)
by Yu-Hsi Chiang
· 10 years ago
64d65a7
minijail: Support pivot_root
by Yu-Hsi Chiang
· 10 years ago
1912c5b
minijail: Support multiple range uid/gid mappings.
by Yu-Hsi Chiang
· 10 years ago
3cc05ea
minijail: Support writing child pid to file
by Yu-Hsi Chiang
· 10 years ago
10e9123
minijail: add user namespace support
by Yu-Hsi Chiang
· 10 years ago
3e954ec
minijail: Add a new option to allow program run as pid 1.
by Yu-Hsi Chiang
· 10 years ago
34e2274
Use libcap on Android.
by Jorge Lucangeli Obes
· 10 years ago
5b7a318
Use __ANDROID__ instead of __BRILLO__.
by Daniel Erat
· 10 years ago
1b21c8f
Use getgrnam_r.
by Yabin Cui
· 10 years ago
a21c8fc
Add 'Android.mk' file, fix compile on Android.
by Jorge Lucangeli Obes
· 10 years ago
20ac228
Revert "Add 'Android.mk' file, fix compile on Android."
by Jorge Lucangeli Obes
· 10 years ago
b9a322d
Add 'Android.mk' file, fix compile on Android.
by Jorge Lucangeli Obes
· 10 years ago
3c84df1
minijail: Set new process group ID.
by Jorge Lucangeli Obes
· 10 years ago
d613ab2
minijail: Make copyright headers consistent.
by Jorge Lucangeli Obes
· 10 years ago
Next »