Robert Swiecki
|
72dfb86551
|
examples/apache: sort includes
|
2017-07-07 02:52:05 +02:00 |
|
Robert Swiecki
|
14282ca2e1
|
examples/apache: manual formatting of seccomp-bpf policy
|
2017-07-07 02:37:33 +02:00 |
|
Robert Swiecki
|
b87ffc44df
|
examples/apache: manual formatting of seccomp-bpf policy
|
2017-07-07 02:36:23 +02:00 |
|
Robert Swiecki
|
657166bf73
|
examples/apache: formatting with clang-format
|
2017-07-07 02:34:57 +02:00 |
|
Robert Swiecki
|
6ce7e253f9
|
mount: Use MS_BIND when remounting R/O
|
2017-07-06 19:39:12 +02:00 |
|
Robert Swiecki
|
7153d489fd
|
caps: dropping caps from the bounding set
|
2017-07-06 14:55:27 +02:00 |
|
Robert Swiecki
|
6c1205badc
|
util: mroe debugging
|
2017-07-06 14:37:10 +02:00 |
|
Robert Swiecki
|
074582782c
|
caps: shorter debug messages
|
2017-07-06 11:37:41 +02:00 |
|
Robert Swiecki
|
c9e95e7be2
|
make indent
|
2017-07-06 11:25:46 +02:00 |
|
Robert Swiecki
|
7d53f4ad1e
|
caps: simplify cap getting/setting
|
2017-07-06 02:21:08 +02:00 |
|
Robert Swiecki
|
7226893b12
|
config: bind caps
|
2017-07-06 01:12:13 +02:00 |
|
Robert Swiecki
|
5ed3c033ed
|
caps: more debugging
|
2017-07-05 17:34:56 +02:00 |
|
Robert Swiecki
|
39ce9d22a7
|
caps: just local caps
|
2017-07-05 17:29:57 +02:00 |
|
Robert Swiecki
|
54a522326f
|
caps: simplify capability operations
|
2017-07-05 15:57:07 +02:00 |
|
Robert Swiecki
|
df0119a5b0
|
caps: CAP_AUDIT_READ is not defined with Ubuntu 14
|
2017-07-05 14:19:51 +02:00 |
|
Robert Swiecki
|
1ece9abf71
|
Merge branch 'master' of ssh://github.com/google/nsjail
|
2017-07-05 13:03:22 +02:00 |
|
Robert Swiecki
|
7ba602a6ed
|
caps: move capability-setting code to caps.*
|
2017-07-05 13:03:14 +02:00 |
|
robertswiecki
|
2ebf1ff78c
|
Merge pull request #30 from andy0130tw/fix/config-fake-euid
Add back ERRNO(1337) for example config
|
2017-07-03 22:53:56 +02:00 |
|
Andy Pan
|
b2855a8164
|
Add back ERRNO(1337) for example config
|
2017-07-04 04:26:37 +08:00 |
|
Robert Swiecki
|
5a68595a5b
|
mount: allow for non-mandatory symlinks
mount: allow for non-mandatory symlinks
|
2017-07-02 03:40:47 +02:00 |
|
Robert Swiecki
|
e86598c544
|
config.proto: reflow field numbering to make it sequential
|
2017-07-02 00:20:35 +02:00 |
|
Robert Swiecki
|
b36c4fb26c
|
make indent
|
2017-07-01 22:23:11 +02:00 |
|
Robert Swiecki
|
ac2928d1c2
|
cmdlink: use different name while printing symlinks/mount points
|
2017-06-29 00:38:20 +02:00 |
|
Robert Swiecki
|
e4aba73385
|
Allow to create symlinks
|
2017-06-29 00:32:20 +02:00 |
|
Robert Swiecki
|
963a7b6913
|
config: missing bind for is_root_rw
|
2017-06-26 20:39:51 +02:00 |
|
Robert Swiecki
|
64f6232e9c
|
config: rename the chrome profile
|
2017-06-22 16:12:56 +02:00 |
|
Robert Swiecki
|
7e0a4cdba8
|
Get number of CPUs early, as it's read from /proc
|
2017-06-22 03:06:53 +02:00 |
|
Robert Swiecki
|
e7b45b6e01
|
cpu: correct year
|
2017-06-22 02:56:10 +02:00 |
|
Robert Swiecki
|
cd17b43cb0
|
remove configs/config1.example
|
2017-06-22 02:28:02 +02:00 |
|
Robert Swiecki
|
de28b4d709
|
configs: demo policy for chrome
|
2017-06-22 01:37:18 +02:00 |
|
Robert Swiecki
|
e802c5c9aa
|
mount: use /dev/shm first as a tmp dir
|
2017-06-22 01:21:09 +02:00 |
|
Robert Swiecki
|
3c7eb879d8
|
cpu: logging
|
2017-06-22 00:42:04 +02:00 |
|
Robert Swiecki
|
c5c925b6fd
|
mount: use TMPDIR to create a temporary dir
|
2017-06-22 00:39:34 +02:00 |
|
Robert Swiecki
|
ca732aafda
|
mount: use TMPDIR to create a temporary dir
|
2017-06-22 00:38:49 +02:00 |
|
Robert Swiecki
|
d6dbee3fb5
|
mount: use rnd in dir name when using rnd
|
2017-06-21 19:34:02 +02:00 |
|
Robert Swiecki
|
27759b1d2e
|
util: missing includes
|
2017-06-21 19:21:18 +02:00 |
|
Robert Swiecki
|
d259ee4f6d
|
mount: more extensive search for suitable root dir
|
2017-06-21 19:18:02 +02:00 |
|
Robert Swiecki
|
86b71f3d1a
|
util: implement utilTimeToStr
|
2017-06-21 18:46:19 +02:00 |
|
Robert Swiecki
|
7917222486
|
mount: Use /tmp/nsjail.[tmp|root].<orig_euid>
|
2017-06-21 18:29:02 +02:00 |
|
Robert Swiecki
|
8c97db00c4
|
cpu: better check for num cpus
|
2017-06-21 17:57:21 +02:00 |
|
Robert Swiecki
|
77fbf7d283
|
cpu: debug msg
|
2017-06-21 17:55:20 +02:00 |
|
Robert Swiecki
|
69783dc200
|
config: max_cpu_num -> max_cpus
|
2017-06-21 17:52:16 +02:00 |
|
Robert Swiecki
|
89de032187
|
configs/bash: remove /dev/shm from bash cfg
|
2017-06-21 03:40:18 +02:00 |
|
Robert Swiecki
|
f0d80bf435
|
cmdline: cast pid_t to unsigned long when using *rintf
|
2017-06-20 23:11:35 +02:00 |
|
Robert Swiecki
|
0c73e84af5
|
configs: add /dev/shm
|
2017-06-20 03:14:09 +02:00 |
|
Robert Swiecki
|
fa2796fe65
|
util: Implement utilSigName()
|
2017-06-20 00:16:38 +02:00 |
|
Robert Swiecki
|
40a472a77e
|
net: better log_d
|
2017-06-19 23:59:29 +02:00 |
|
Robert Swiecki
|
a8c80f1b0a
|
net: additional log_d for IPv4 -> IPv6 conversion
|
2017-06-19 23:57:31 +02:00 |
|
Robert Swiecki
|
be083f6752
|
config: bind port to config
|
2017-06-19 23:52:56 +02:00 |
|
Robert Swiecki
|
73f1d44c92
|
Allow to use IPv4 addr with --bindhost
|
2017-06-19 22:35:57 +02:00 |
|