- 6dc224f Add minijail_copy_jail by Dylan Reid · 3 years, 10 months ago
- 1403606 Don't log the warning for an expected kill by Victor Hsieh · 3 years, 11 months ago
- c718268 Add overlap handling to redirect_fds(). by Allen Webb · 4 years ago
- e119bbb minijail: Don't allow stricter remounting of specific dir by Nicole Anderson-Au · 4 years, 1 month ago
- 835f717 minijail: Add mount propagation granularity to libminijail by Nicole Anderson-Au · 4 years, 2 months ago
- 604cc7b mount-dev: set up empty /dev/shm for glibc APIs by Mike Frysinger · 4 years, 2 months ago
- a63407a libminijail: Avoid unnecessary dup2(2) calls by Luis Héctor Chávez · 4 years, 2 months ago
- 01b628c libminijail: Refactor `seccomp_filter_flags_available()` by Luis Héctor Chávez · 4 years, 2 months ago
- 320c4fc Stop attempting to unmount /proc in the user namespace case. by Jorge Lucangeli Obes · 4 years, 3 months ago
- 31adc6c minijail0: Add flag to allow speculative execution on seccomp enabled processes by Anand K Mistry · 4 years, 4 months ago
- bcc8cfd minijail: Check for repeat syscall definitions by Nicole Anderson-Au · 4 years, 4 months ago
- d23ad792 Implement SECCOMP_RET_KILL_PROCESS. by Jorge Lucangeli Obes · 4 years, 5 months ago
- 5f9e300 libminijail: add a string marshal helper by Mike Frysinger · 4 years, 6 months ago
- 0a27ab0 libminijail: localize internal APIs by Mike Frysinger · 4 years, 6 months ago
- 9e1ac37 minijail0: Remount mounts as MS_SLAVE by default. by Jorge Lucangeli Obes · 5 years ago
- 1036cd8 add missing error checking for various allocations by Mike Frysinger · 4 years, 7 months ago
- a42182d Return MINIJAIL_ERR_MOUNT instead of crashing if mount_one fails by François Degros · 4 years, 11 months ago linux-v15
- 1cf29fb Close redirected fds after dup2()-ing them. by Mattias Nissler · 5 years ago
- b35f2c1 Allow passing environment also for LD_PRELOAD by Mattias Nissler · 5 years ago
- 6123e5a Improve resource management for minijail_run_internal by Mattias Nissler · 5 years ago
- 0a0514c Skip new mount namespace on -k. by Jorge Lucangeli Obes · 5 years ago
- 9461984 Call sys_clone according to Linux doc by François Degros · 5 years ago
- 664eba7 Fix crash when subprocess dies by François Degros · 5 years ago linux-v11
- a8be2c4 Close original pipe end after dup2 in child process by François Degros · 5 years ago
- 47e6335 Made minijail_kill return the same code as minijail_wait by François Degros · 5 years ago
- 627deba Handle EINTR error inside minijail_wait by François Degros · 5 years ago
- 08b10f7 minijail_wait returns 126 or 127 if execve fails in child process by François Degros · 5 years ago
- 9341806 Fix -K check. by Jorge Lucangeli Obes · 5 years ago ndk-sysroot-r21
- a45ade8 Print clearer error when clone() fails with EPERM. by Jorge Lucangeli Obes · 5 years ago
- b4b7c5a Revert "Fix RO-remount logic for bindmounts" by Jorge Lucangeli Obes · 6 years ago
- 7654c6e Revert "Fix statvfs() call on non-existent directories." by Jorge Lucangeli Obes · 6 years ago
- 9299cae Fix statvfs() call on non-existent directories. by Jorge Lucangeli Obes · 6 years ago
- cf3bbea Clarify namespace fd preservation comment. by Jorge Lucangeli Obes · 6 years ago
- 2337f80 Preserve namespace file descriptors. by Jorge Lucangeli Obes · 6 years ago
- 52f6ada make die messages slightly different by Mike Frysinger · 6 years ago crosvm-master android-o-mr1-iot-release-1.0.14
- 64cf3cb Fix RO-remount logic for bindmounts by Kevin Hamacher · 6 years ago linux-v10
- 32201f8 Add support for SECCOMP_RET_LOG. by Jorge Lucangeli Obes · 6 years ago
- e1a8689 Add scaffolding to support SECCOMP_RET_LOG. by Jorge Lucangeli Obes · 6 years ago
- 9b41e65 minijail: Add a flag to call setsid() in child by Xiyuan Xia · 6 years ago
- 2d69add libminijail: Block child sync for all configuration. by Daniel Erat · 6 years ago oreo-mr1-iot-release android-o-mr1-iot-release-1.0.12
- d1d24d2 minijail: Stop using putenv(3) by Luis Hector Chavez · 6 years ago
- 2fa96d1 Allow skipping RO /proc mount. by Jorge Lucangeli Obes · 6 years ago
- 48b5ff1 minijail: Untangle redundant SECUREBITS logic by Mattias Nissler · 6 years ago
- d2c951d Add support for passing a new environment to the child. by Jorge Lucangeli Obes · 6 years ago
- 771d4c0 Reduce mount logging. by Jorge Lucangeli Obes · 6 years ago
- 902a449 libminijail: fix entering of mount & net namespaces by Mike Frysinger · 6 years ago android-o-mr1-iot-release-1.0.8
- c3e1772 minijail: Add support for pre-compiled BPF programs by Luis Hector Chavez · 6 years ago nougat-iot-release android-n-iot-release-ihome-igv1 android-o-mr1-iot-release-1.0.7 android-o-mr1-iot-release-smart-clock-fcs android-o-mr1-iot-release-smart-clock-fsi android-o-mr1-iot-release-smart-clock-r2 android-o-mr1-iot-release-smart-clock-r6 android-o-mr1-iot-release-smart-display-r14 android-o-mr1-iot-release-smart-display-r22 android-o-mr1-iot-release-smart-display-r30 android-o-mr1-iot-release-smart-display-r39 android-o-mr1-iot-release-smart-display-r4 android-o-mr1-iot-release-smart-display-r40.1J android-o-mr1-iot-release-smart-display-r5 android-o-mr1-iot-release-smart-display-r8 android-o-mr1-iot-release-smart-display-r9 android-wear-8.0.0_r2
- 83a4489 minijail: Enter all namespaces before calling execve(2) by Luis Hector Chavez · 6 years ago
- 9acba45 minijail: Add a way to specify the path of libminijailpreload.so by Luis Hector Chavez · 6 years ago
- 916c6c3 add a build-time knob to disable seccomp logging (-L) by Mike Frysinger · 6 years ago android-o-mr1-iot-release-1.0.5
- b7803c8 minijail0: change default mount settings for tmpfs mounts by Mike Frysinger · 7 years ago android-o-mr1-iot-release-1.0.4
- aeab0e1 Remove semi-pointless info() message. by Jorge Lucangeli Obes · 7 years ago
- cb8674d minijail0: change default mount flags with -k by Mike Frysinger · 7 years ago
- 3d98f3c Rename running_with_asan_or_hwasan (NFC). by Evgenii Stepanov · 7 years ago
- 825828c Skip setting seccomp filter under HWASan, same as ASan. by Evgenii Stepanov · 7 years ago
- 89cbc32 minijail: Avoid setting PR_SET_KEEPCAPS if that bit is locked by Luis Hector Chavez · 7 years ago android-o-mr1-iot-release-1.0.3
- a30a206 Add the 'e' flag to all fopen(3) calls by Luis Hector Chavez · 7 years ago
- 0bacbf8 minijail: Copy the mount flags from source when bind-mounting by Luis Hector Chavez · 7 years ago
- 33d051a stop using "nr" for signal numbers by Mike Frysinger · 7 years ago linux-v6
- d9ef07c clean up & unify compiler attributes by Mike Frysinger · 7 years ago
- 5423421 Skip dropping the bounding set without SECURE_NOROOT. by Jorge Lucangeli Obes · 7 years ago android-n-iot-release-lg-thinq-wk7 android-o-mr1-iot-release-1.0.0 android-p-preview-2 android-p-preview-3 android-wear-p-preview-2
- a27118a Add a way to reset signal handlers by Luis Hector Chavez · 7 years ago
- 1b32f85 Use warn() when logging an error for setup_mount_destination() by yusukes · 7 years ago linux-v4
- 785b1c3 extend -K to accept a mount propagation type by Mike Frysinger · 7 years ago android-p-preview-1
- 7058a2d Use rlim_t for the arguments in minijail_rlimit() by Luis Hector Chavez · 7 years ago
- 8c3acbc Fix leaks in mount_one() by Luis Hector Chavez · 7 years ago
- 5dd5b1b move setpgid() from libminijail to minijail0 by Stephen Barber · 7 years ago
- ac08a68 allow bind mounts outside of chroots by Mike Frysinger · 7 years ago
- 0d1cbf6 libminijail: increase max preserved FDs by Stephen Barber · 7 years ago
- 33ffef3 add an option to set up a minimal /dev by Mike Frysinger · 8 years ago
- 0412dcc Add minijail_fork by Dylan Reid · 8 years ago
- ac981fc minijail: Decouple the do_init flag by Luis Hector Chavez · 7 years ago
- 7132355 Improve the way uid/gid changes in unprivileged userns by Luis Hector Chavez · 8 years ago
- 114a930 Allow redirecting logging to an FD by Luis Hector Chavez · 8 years ago
- 7624e71 Improve compiler logging by Luis Hector Chavez · 8 years ago
- 64730af Add a pre-chroot hook by Luis Hector Chavez · 7 years ago
- 18c49c8 Make minijail_run_internal static by Dylan Reid · 8 years ago
- acfb8be Move minijail_run args in to a struct. by Dylan Reid · 8 years ago
- eaab420 abort when bind mounting a non-existent source path by Mike Frysinger · 8 years ago
- 1617f63 minijail: Add a way to allow arbitrary fd redirects by Luis Hector Chavez · 8 years ago o-iot-preview-5 android-o-iot-preview-5
- e0ba4ce minijail: Add minijail_add_hook() by Luis Hector Chavez · 8 years ago
- ec0a2c1 minijail: Allow skipping setting securebits when restricting caps by Luis Hector Chavez · 8 years ago
- fe5fb8e minijail: Add support for dropping caps with static binaries by Luis Hector Chavez · 8 years ago
- 0f72ef4 Add the ability to set rlimits on the jailed process by Dylan Reid · 8 years ago
- b9a7b16 support creating new uts namespaces (and setting hostnames) by Mike Frysinger · 8 years ago android-o-preview-3
- dba6209 Reland "Add optional signal forwarder and '-z' option to cli" by Jorge Lucangeli Obes · 8 years ago
- 7151582 Revert "Add optional signal forwarder and '-z' option to cli" by Roozbeh Pournader · 8 years ago
- 74b9027 Add optional signal forwarder and '-z' option to cli by Graziano Misuraca · 8 years ago
- f6058c3 Fix prctl() call. by Jorge Lucangeli Obes · 8 years ago
- a6eb21a Implement initial ambient capabilities support. by Jorge Lucangeli Obes · 8 years ago
- 0b20877 Refactor Minijail in preparation for ambient capabilities work. by Jorge Lucangeli Obes · 8 years ago
- 866bb3a Add a flag to drop access to the session keyring by Chirantan Ekbote · 8 years ago
- ab9eb44 allow specifying larger /tmp tmpfs mounts by Martin Pelikán · 8 years ago
- b91d404 add nosuid/nodev/noexec settings to the /tmp mount by Mike Frysinger · 8 years ago
- 3ba8157 name the /proc mount by Mike Frysinger · 8 years ago
- 0dce757 fix mode settings on /tmp mount by Mike Frysinger · 8 years ago
- eea841b keep error checking style with setgroups logic by Mike Frysinger · 8 years ago
- 3454319 Clarify, simplify some error messages. by Jorge Lucangeli Obes · 8 years ago android-n-mr2-preview-1
- 6b190c0 ignore missing /proc/<pid>/setgroups files by Mike Frysinger · 8 years ago
- 13807cb minijail: Add ability to keep supplementary gids. by Lutz Justen · 8 years ago
