Robert Swiecki
|
cf163807db
|
Kafel: wrong check
|
2017-05-08 15:53:43 +02:00 |
|
Robert Swiecki
|
d9cb28b97d
|
Use kafel unconditionally
|
2017-05-08 15:50:29 +02:00 |
|
Robert Swiecki
|
9414b1a635
|
subproc: print different message if /proc/pid/syscall contains 3 entries only
|
2017-05-08 15:24:03 +02:00 |
|
Robert Swiecki
|
e185bd77e9
|
Reference to newer kafel
|
2017-05-08 15:15:13 +02:00 |
|
Robert Swiecki
|
6596adb5e2
|
cmdline: 'i'
|
2017-05-07 21:10:39 +02:00 |
|
robertswiecki
|
dc5905ab17
|
Update README.md
|
2017-05-07 04:20:23 +02:00 |
|
robertswiecki
|
438fd80ecf
|
Update README.md
|
2017-05-07 04:15:42 +02:00 |
|
robertswiecki
|
f7a3b3e528
|
Update README.md
|
2017-05-07 04:10:19 +02:00 |
|
Robert Swiecki
|
f2f6337a0b
|
readme/index
|
2017-05-07 04:03:25 +02:00 |
|
Robert Swiecki
|
08c92468eb
|
Readme
|
2017-05-07 04:00:39 +02:00 |
|
robertswiecki
|
bccdf78415
|
Update README.md
|
2017-05-06 22:48:24 +02:00 |
|
robertswiecki
|
67039ef8aa
|
Update README.md
|
2017-05-06 22:46:09 +02:00 |
|
Robert Swiecki
|
5c0e13993b
|
readme
|
2017-05-06 22:39:23 +02:00 |
|
Robert Swiecki
|
c316ab68cc
|
readme
|
2017-05-06 22:38:35 +02:00 |
|
Robert Swiecki
|
322f414ccb
|
readme
|
2017-05-06 22:38:09 +02:00 |
|
Robert Swiecki
|
46010aa443
|
readme
|
2017-05-06 22:37:24 +02:00 |
|
Robert Swiecki
|
dc81a3fe49
|
readme
|
2017-05-06 22:37:01 +02:00 |
|
Robert Swiecki
|
b98511f991
|
readme
|
2017-05-06 22:34:33 +02:00 |
|
Robert Swiecki
|
d1b3adfc40
|
readme
|
2017-05-06 22:33:13 +02:00 |
|
Robert Swiecki
|
ec765851f4
|
apply --rw to /proc as well
|
2017-04-22 23:54:33 +02:00 |
|
robertswiecki
|
44d4d47d0d
|
Merge pull request #13 from disconnect3d/add_dockerfile
Add Dockerfile
|
2017-04-21 15:46:10 +02:00 |
|
disconnect3d
|
2162b79fb1
|
Add Dockerfile
|
2017-04-21 15:35:50 +02:00 |
|
Robert Swiecki
|
cc5d4b65c9
|
cgroups: support for PIDs
|
2017-04-20 17:48:20 +02:00 |
|
robertswiecki
|
730991baff
|
Merge pull request #12 from happyCoder92/master
Update kafel to newest version
|
2017-03-08 18:01:49 +01:00 |
|
Wiktor Garbacz
|
11112750c1
|
Update kafel to newest version
|
2017-03-08 15:32:04 +01:00 |
|
robertswiecki
|
1b06c6f685
|
Merge pull request #11 from sbc100/exit_code_on_bad_option
Exit with non-zero status on bad command line option
|
2017-02-16 02:44:50 +01:00 |
|
Sam Clegg
|
74010d0c45
|
Exit with non-zero status on bad command line option
|
2017-02-15 17:23:55 -08:00 |
|
Robert Swiecki
|
c4c0d24e7c
|
Print out logs no matter what the setting of -v/-q
|
2017-02-15 18:59:02 +01:00 |
|
Robert Swiecki
|
b73a63fe35
|
Make open-at interrupt safe
|
2017-02-14 22:14:08 +01:00 |
|
Robert Swiecki
|
9a4dbc1146
|
log: logging globals should not be 'per-thread'
|
2017-02-14 21:55:42 +01:00 |
|
Robert Swiecki
|
478d2b3789
|
cmdline: provide both -v/verbose and -q/quiet for logging
|
2017-02-14 21:54:02 +01:00 |
|
Robert Swiecki
|
e38be346dc
|
Make it possible to build w/o kafel and nl3
|
2017-02-13 22:59:24 +01:00 |
|
Robert Swiecki
|
5b07ba1d32
|
contain: capabilities
|
2017-02-12 16:54:39 +01:00 |
|
Robert Swiecki
|
341832d755
|
Duplicate logging fd, so it can be used from child process
|
2017-02-11 20:33:54 +01:00 |
|
Robert Swiecki
|
a1c0cbacbd
|
mount: log
|
2017-02-10 02:25:50 +01:00 |
|
Robert Swiecki
|
57f9a0f9db
|
Invalid count 2 -> 1
|
2017-02-10 02:24:35 +01:00 |
|
Robert Swiecki
|
d5a2130164
|
newuidmap: partial revert
|
2017-02-09 13:37:58 +01:00 |
|
Robert Swiecki
|
21982290e5
|
newuidmap: missing pid
|
2017-02-09 13:37:21 +01:00 |
|
Robert Swiecki
|
719585ee5a
|
common: good types for uids
|
2017-02-08 23:21:03 +01:00 |
|
Robert Swiecki
|
9f832aa35a
|
Uid/Gid fix
|
2017-02-08 00:42:23 +01:00 |
|
Robert Swiecki
|
4a154733e0
|
Allow to specify multiple uid/gid maps
|
2017-02-08 00:36:32 +01:00 |
|
Robert Swiecki
|
f7b9fede69
|
More debug logging in user.c
|
2017-02-07 18:40:36 +01:00 |
|
Robert Swiecki
|
3b83267cfd
|
Init user-ns setresuid/setresgid before initializing other NSes
|
2017-02-07 18:31:50 +01:00 |
|
Robert Swiecki
|
a0cc72aa5c
|
cmdline: typo
|
2017-01-28 14:25:09 +01:00 |
|
Robert Swiecki
|
7917aae84d
|
keep_caps: make effective caps eq to permitted
|
2017-01-23 12:02:48 +01:00 |
|
Robert Swiecki
|
20745a455d
|
Support for ambient capabilities
|
2017-01-21 00:15:03 +01:00 |
|
Robert Swiecki
|
f990955d9e
|
seccomp syscall printing: various formats of /proc/<pid>/syscall
|
2017-01-18 22:32:27 +01:00 |
|
Robert Swiecki
|
97737f451e
|
Readme: TOC
|
2017-01-15 22:17:14 +01:00 |
|
Robert Swiecki
|
4d5750cca8
|
Merge branch 'master' of ssh://github.com/google/nsjail
|
2017-01-15 22:01:04 +01:00 |
|
Robert Swiecki
|
c2e369beb1
|
Readme: example for kafel/seccomp-bpf
|
2017-01-15 22:00:55 +01:00 |
|