woj/nsjail
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
778 Commits 2 Branches 0 Tags 1.5 MiB
7bddb40d87
Commit Graph

778 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
robertswiecki
2ebf1ff78c Merge pull request #30 from andy0130tw/fix/config-fake-euid 
Add back ERRNO(1337) for example config
 2017-07-03 22:53:56 +02:00
Andy Pan
b2855a8164 Add back ERRNO(1337) for example config 2017-07-04 04:26:37 +08:00
Robert Swiecki
5a68595a5b mount: allow for non-mandatory symlinks 
mount: allow for non-mandatory symlinks
 2017-07-02 03:40:47 +02:00
Robert Swiecki
e86598c544 config.proto: reflow field numbering to make it sequential 2017-07-02 00:20:35 +02:00
Robert Swiecki
b36c4fb26c make indent 2017-07-01 22:23:11 +02:00
Robert Swiecki
ac2928d1c2 cmdlink: use different name while printing symlinks/mount points 2017-06-29 00:38:20 +02:00
Robert Swiecki
e4aba73385 Allow to create symlinks 2017-06-29 00:32:20 +02:00
Robert Swiecki
963a7b6913 config: missing bind for is_root_rw 2017-06-26 20:39:51 +02:00
Robert Swiecki
64f6232e9c config: rename the chrome profile 2017-06-22 16:12:56 +02:00
Robert Swiecki
7e0a4cdba8 Get number of CPUs early, as it's read from /proc 2017-06-22 03:06:53 +02:00
Robert Swiecki
e7b45b6e01 cpu: correct year 2017-06-22 02:56:10 +02:00
Robert Swiecki
cd17b43cb0 remove configs/config1.example 2017-06-22 02:28:02 +02:00
Robert Swiecki
de28b4d709 configs: demo policy for chrome 2017-06-22 01:37:18 +02:00
Robert Swiecki
e802c5c9aa mount: use /dev/shm first as a tmp dir 2017-06-22 01:21:09 +02:00
Robert Swiecki
3c7eb879d8 cpu: logging 2017-06-22 00:42:04 +02:00
Robert Swiecki
c5c925b6fd mount: use TMPDIR to create a temporary dir 2017-06-22 00:39:34 +02:00
Robert Swiecki
ca732aafda mount: use TMPDIR to create a temporary dir 2017-06-22 00:38:49 +02:00
Robert Swiecki
d6dbee3fb5 mount: use rnd in dir name when using rnd 2017-06-21 19:34:02 +02:00
Robert Swiecki
27759b1d2e util: missing includes 2017-06-21 19:21:18 +02:00
Robert Swiecki
d259ee4f6d mount: more extensive search for suitable root dir 2017-06-21 19:18:02 +02:00
Robert Swiecki
86b71f3d1a util: implement utilTimeToStr 2017-06-21 18:46:19 +02:00
Robert Swiecki
7917222486 mount: Use /tmp/nsjail.[tmp|root].<orig_euid> 2017-06-21 18:29:02 +02:00
Robert Swiecki
8c97db00c4 cpu: better check for num cpus 2017-06-21 17:57:21 +02:00
Robert Swiecki
77fbf7d283 cpu: debug msg 2017-06-21 17:55:20 +02:00
Robert Swiecki
69783dc200 config: max_cpu_num -> max_cpus 2017-06-21 17:52:16 +02:00
Robert Swiecki
89de032187 configs/bash: remove /dev/shm from bash cfg 2017-06-21 03:40:18 +02:00
Robert Swiecki
f0d80bf435 cmdline: cast pid_t to unsigned long when using *rintf 2017-06-20 23:11:35 +02:00
Robert Swiecki
0c73e84af5 configs: add /dev/shm 2017-06-20 03:14:09 +02:00
Robert Swiecki
fa2796fe65 util: Implement utilSigName() 2017-06-20 00:16:38 +02:00
Robert Swiecki
40a472a77e net: better log_d 2017-06-19 23:59:29 +02:00
Robert Swiecki
a8c80f1b0a net: additional log_d for IPv4 -> IPv6 conversion 2017-06-19 23:57:31 +02:00
Robert Swiecki
be083f6752 config: bind port to config 2017-06-19 23:52:56 +02:00
Robert Swiecki
73f1d44c92 Allow to use IPv4 addr with --bindhost 2017-06-19 22:35:57 +02:00
Robert Swiecki
4f1a6aead2 index.md 2017-06-19 20:28:48 +02:00
Robert Swiecki
ed2bb8a46a cpu: warning about no of cpus 2017-06-19 19:11:53 +02:00
Robert Swiecki
e7b3be206a Print remote IP when removing task from pool 2017-06-19 18:53:29 +02:00
Robert Swiecki
ee60565462 cpu: free cpu mask 2017-06-19 17:07:50 +02:00
Robert Swiecki
ceaed43133 config: implement max_cpu_num in PB 2017-06-19 17:05:01 +02:00
Robert Swiecki
0e7393cccf cmdline: implement affinity setting, to limit jailed process to n max cpus 2017-06-19 17:01:50 +02:00
robertswiecki
dbdeba6ea4 Update README.md 2017-06-16 12:00:11 +02:00
robertswiecki
ed2bf6ee28 Update README.md 2017-06-16 11:55:15 +02:00
Robert Swiecki
54da7fca11 -Me: set PR_SET_DUMPABLE,0 for the init 2017-06-14 02:21:53 +02:00
Robert Swiecki
b67ea2272f Me mode: make init reap zombie processes 2017-06-14 02:19:03 +02:00
Robert Swiecki
4c9c70e763 Merge branch 'master' of ssh://github.com/google/nsjail 2017-06-14 02:15:19 +02:00
Robert Swiecki
5f56fe5b8f Me mode: make init reap zombie processes 2017-06-14 02:15:11 +02:00
robertswiecki
7812e3597a Merge pull request #25 from cstrouse/dockerfile-enhancements 
Refactor using current official Dockerfile best practices
 2017-06-13 17:06:47 +02:00
Casey Strouse
76c7a23e65 Refactor using current official Dockerfile best practices 
Implement best practices for Dockerfiles as per the official
documentation:
https://docs.docker.com/engine/userguide/eng-image/dockerfile_best-practices/

Reduces image size from 451.6MB to 404.9MB.
 2017-06-12 19:50:55 -07:00
Robert Swiecki
1dd3223b74 iface -> iface_vs 2017-06-12 22:20:21 +02:00
Robert Swiecki
88d8570843 configs/bash: set argv[0] 2017-06-12 02:16:27 +02:00
Robert Swiecki
f203669d25 config: give ability to override argv[0] 2017-06-12 02:14:18 +02:00