John Vogel
|
6128d3a992
|
nsjail.1: update manpage to match README
Added --symlink/-s option.
Removed --tmpfs_size option.
Changed --cpu_mount, --cpu_parent to
--cgroup_cpu_mount, --cgroup_cpu_parent.
Adjustments to match README.
|
2018-06-12 17:33:33 -04:00 |
|
Robert Swiecki
|
72ed4b54a1
|
nsjail.h: missed initialization of keep_env
|
2018-06-12 16:57:19 +02:00 |
|
Robert Swiecki
|
a263231ee0
|
readme
|
2018-06-12 15:47:32 +02:00 |
|
Robert Swiecki
|
cf9850f944
|
1. Give ability to specify sym-links from the command-line 2. Remove tmpfs_size. -m none:dest:tmpfs:size=..... should be used for this
|
2018-06-12 15:37:30 +02:00 |
|
Robert Swiecki
|
ea420b163d
|
move isatty after log_fd is set
|
2018-06-07 18:43:08 +02:00 |
|
Robert Swiecki
|
0f2d50bf1a
|
Log to a duplicate of stderr initially
|
2018-06-07 18:42:34 +02:00 |
|
Robert Swiecki
|
e8e6c1b906
|
make indent depend
|
2018-06-07 18:37:17 +02:00 |
|
Robert Swiecki
|
ffa0051d98
|
logs: lower logfile error to warning
|
2018-06-07 16:57:43 +02:00 |
|
Robert Swiecki
|
04627982d0
|
logs: use log file/level immediately
|
2018-06-07 16:51:50 +02:00 |
|
Robert Swiecki
|
5176140e3f
|
Merge branch 'master' of github.com:google/nsjail
|
2018-06-07 14:59:32 +02:00 |
|
Robert Swiecki
|
ffd836018d
|
subproc: replicate bash behavior on exit values
|
2018-06-07 14:59:12 +02:00 |
|
Robert Swiecki
|
fc0e98b6b4
|
subproc: better log messages
|
2018-06-03 03:22:50 +02:00 |
|
Robert Swiecki
|
c4fca33542
|
Merge branch 'master' of ssh://github.com/google/nsjail
|
2018-06-03 03:19:52 +02:00 |
|
Robert Swiecki
|
111481532b
|
config: add --iface_own to the proto config
|
2018-06-03 03:19:40 +02:00 |
|
robertswiecki
|
0677f160f3
|
Merge pull request #79 from jvvv/master
Update docs for options changes
|
2018-06-02 20:17:03 +02:00 |
|
John Vogel
|
07702cc20b
|
Update docs for options changes
Add new --iface_own option to docs.
Remove deprecated option from docs.
|
2018-06-02 11:02:09 -04:00 |
|
Robert Swiecki
|
a30f2ddf12
|
configs/firefox - global user must be specified because of X11 permissions
|
2018-06-01 23:39:07 +02:00 |
|
Robert Swiecki
|
15a13e78b8
|
cmdline: remove deprecated options
|
2018-06-01 17:15:47 +02:00 |
|
Robert Swiecki
|
2d5e90cd04
|
configs/firefox: no need to specify local users
|
2018-06-01 17:06:46 +02:00 |
|
Robert Swiecki
|
4e243825df
|
configs: /etc/machine-id doesn't seem required
|
2018-06-01 12:22:03 +02:00 |
|
Robert Swiecki
|
e3fae9b4d5
|
configs/firefox: disable clone_newnet for regular-user-firefox
|
2018-06-01 12:19:35 +02:00 |
|
Robert Swiecki
|
4c251fb593
|
configs: updated and synchronized for firefox
|
2018-06-01 12:17:27 +02:00 |
|
Robert Swiecki
|
824b9a2982
|
net: dbg message
|
2018-06-01 03:14:48 +02:00 |
|
Robert Swiecki
|
78fa4031c4
|
net: separate function for interface configuration
|
2018-06-01 02:10:05 +02:00 |
|
Robert Swiecki
|
47c8cf7a01
|
net: support owning interfaces with libnl too
|
2018-05-31 14:45:44 +02:00 |
|
Robert Swiecki
|
7d57fc81be
|
cmdline: add iface_own to take ownership of one of the global interfaces
|
2018-05-30 15:26:09 +02:00 |
|
Robert Swiecki
|
0620d7a50c
|
cmdline: name of params
|
2018-05-30 15:03:01 +02:00 |
|
Robert Swiecki
|
fbf484f933
|
nsjail: more debug messages
|
2018-05-28 02:04:03 +02:00 |
|
Robert Swiecki
|
ff63b2ed4f
|
nsjail: better return values
|
2018-05-28 01:40:02 +02:00 |
|
Robert Swiecki
|
b8798fc9a7
|
use strtoimax when needed
|
2018-05-26 13:54:17 +02:00 |
|
Robert Swiecki
|
5681a1822d
|
new version of kafel
|
2018-05-26 03:34:27 +02:00 |
|
Robert Swiecki
|
5643e790fc
|
nsjail: make listenMode return int
|
2018-05-26 01:24:58 +02:00 |
|
Robert Swiecki
|
5632b66a5f
|
cmdline: check val value before conversion
|
2018-05-26 00:40:28 +02:00 |
|
Robert Swiecki
|
9ed90812c0
|
better checks for strto*l errors
|
2018-05-25 23:53:11 +02:00 |
|
Robert Swiecki
|
5b7cfc7f00
|
namespace'ize nsjail.cc
|
2018-05-25 02:15:47 +02:00 |
|
Robert Swiecki
|
b55875f45e
|
nsjail: change the owner of struct termios
|
2018-05-25 02:05:12 +02:00 |
|
Robert Swiecki
|
0b8e927aed
|
nsjail: save console just before we're prepared to run commands
|
2018-05-25 01:06:05 +02:00 |
|
Robert Swiecki
|
2470635c7c
|
nsjail: save and restore console params
|
2018-05-25 01:04:29 +02:00 |
|
Robert Swiecki
|
86b36088cf
|
util: remove unused sSnPrintf
|
2018-05-24 18:32:01 +02:00 |
|
Robert Swiecki
|
fe7b53c1fd
|
caps: remove unused var
|
2018-05-24 15:38:09 +02:00 |
|
Robert Swiecki
|
b7db2fabc7
|
cmdline: better description for --seccomp_log in nsjail.1
|
2018-05-24 15:34:16 +02:00 |
|
Robert Swiecki
|
b69b4d15cc
|
cmdline: better description for --seccomp_log
|
2018-05-24 15:21:42 +02:00 |
|
robertswiecki
|
4f48c181e2
|
Merge pull request #77 from jvvv/master
Add new --seccomp_log option to docs
|
2018-05-24 15:17:59 +02:00 |
|
John Vogel
|
006270746d
|
Add new --seccomp_log option to docs
|
2018-05-23 20:44:31 -04:00 |
|
Robert Swiecki
|
2b6955e48c
|
A few c++isms more
|
2018-05-23 18:19:17 +02:00 |
|
Robert Swiecki
|
6d3fb7e5b2
|
sandbox: casting for syscall()
|
2018-05-23 15:46:25 +02:00 |
|
Robert Swiecki
|
48e8634ba5
|
config: add support for seccomp_log
|
2018-05-23 15:38:45 +02:00 |
|
Robert Swiecki
|
4394fa725e
|
sandbox: add support for SECCOMP_FILTER_FLAG_LOG
|
2018-05-23 15:32:45 +02:00 |
|
Robert Swiecki
|
c365eb1766
|
More c++ isms
|
2018-05-22 14:27:18 +02:00 |
|
Robert Swiecki
|
a42203a6dd
|
user: cons'ifize a var
|
2018-05-20 23:52:55 +02:00 |
|