platform_external_minijail/minijail0_cli.c, branch pie-dev Unnamed repository; edit this file 'description' to name the repository. extend -K to accept a mount propagation type 2018-02-28T16:48:55+00:00 Mike Frysinger vapier@google.com 2018-02-23T20:47:24+00:00 785b1c3b309dd50b93ae03a9da125e031a9041d9 By default, minijail will mark all mounts as private. The -K flag allows them to skip that step which will retain all existing mount settings. We now have scenarios where we want to share some mount points, so lets extend -K to accept the propagation mode. This lets people use -Kslave and mark all the mount points as slaves. Bug: chromium:813131 Test: `make check` and using -Kslave allows changes in the parent namespace Change-Id: I571e402a383ecf60a6104f87ef97b76710a34d38 
By default, minijail will mark all mounts as private.  The -K flag
allows them to skip that step which will retain all existing mount
settings.  We now have scenarios where we want to share some mount
points, so lets extend -K to accept the propagation mode.  This lets
people use -Kslave and mark all the mount points as slaves.

Bug: chromium:813131
Test: `make check` and using -Kslave allows changes in the parent namespace
Change-Id: I571e402a383ecf60a6104f87ef97b76710a34d38
minijail0: fix multiple data options with the -k mount 2018-01-31T01:46:31+00:00 Mike Frysinger vapier@google.com 2018-01-24T23:01:16+00:00 4f3e09f23a0e338440513c0e10db14d41ebc5dd0 The recent fix for optional fields (fea05c6dcac6b69e9cc7ba03ee9c3d074) broke passing in multiple mount options with the -k flag. Fix it and add a unittest to prevent regression. Bug: None Test: `make check` passes Test: `./minijail0 -v -k none,/tmp,tmpfs,0xe,uid=10,mode=0755 /bin/ls -al /tmp/` works again Change-Id: Ia9fe9dec4a16654fc9a32414586a8c39d22692eb 
The recent fix for optional fields (fea05c6dcac6b69e9cc7ba03ee9c3d074)
broke passing in multiple mount options with the -k flag.  Fix it and
add a unittest to prevent regression.

Bug: None
Test: `make check` passes
Test: `./minijail0 -v -k none,/tmp,tmpfs,0xe,uid=10,mode=0755 /bin/ls -al /tmp/` works again
Change-Id: Ia9fe9dec4a16654fc9a32414586a8c39d22692eb
Use rlim_t for the arguments in minijail_rlimit() 2018-01-29T21:39:32+00:00 Luis Hector Chavez lhchavez@google.com 2018-01-29T16:41:34+00:00 7058a2debe9c1b842b8788aea8cb1fc54765a0f3 This changes the type used to pass the value of the limit from uint32_t to rlim_t, which makes it possible to pass in RLIM_INFINITY in 64-bit environments. Bug: None Test: minijail_rlimit(j, RLIMIT_STACK, RLIM_INFINITY, RLIM_INFINITY); Change-Id: I6bbf956974c7f28a2e0bb8ad3efb4d25c5675593 
This changes the type used to pass the value of the limit from uint32_t
to rlim_t, which makes it possible to pass in RLIM_INFINITY in 64-bit
environments.

Bug: None
Test: minijail_rlimit(j, RLIMIT_STACK, RLIM_INFINITY, RLIM_INFINITY);
Change-Id: I6bbf956974c7f28a2e0bb8ad3efb4d25c5675593
add unittests for the minijail0 cli 2018-01-26T06:44:49+00:00 Mike Frysinger vapier@google.com 2018-01-22T21:43:33+00:00 4d2a81e57861d5fe89dd35d040ab0a21088896e8 Bug: None Test: `make check` passes Change-Id: I927a609453881e045e07013b7cca8594cc5e972c 
Bug: None
Test: `make check` passes

Change-Id: I927a609453881e045e07013b7cca8594cc5e972c
split minijail0 cli parsers into a sep module 2018-01-24T09:36:21+00:00 Mike Frysinger vapier@google.com 2018-01-20T18:42:10+00:00 5ef22ca4043f0dde4ac2e73a46321e1c03ac9541 This will let us unittest them easily. The only thing this CL has done is move all the non-main funcs from minijail0.c to minijail0_cli.c. Bug: None Test: `make check` passes Change-Id: I2be5cf2097d1f8d15270595f5200c872a0a551c4 
This will let us unittest them easily.  The only thing this CL has done
is move all the non-main funcs from minijail0.c to minijail0_cli.c.

Bug: None
Test: `make check` passes
Change-Id: I2be5cf2097d1f8d15270595f5200c872a0a551c4