platform_external_minijail/test, branch master

Implement @include functionality for seccomp policy files.

2017-03-27T15:04:51+00:00

Policies can now use the @include directive to include other policy
files. Included files can have absolute paths or be relative to CWD.
Only a single level of includes is allowed.

Bug: 36007996
Test: New unit tests.

Change-Id: Ideb8ef5d48b6f737dc156e3c50170817e0ba91ec

util: add an ARRAY_SIZE helper.

2017-01-19T16:20:32+00:00

Bug: None
Test: `make tests` pass
Change-Id: Iecd2015b7ff96cdd78ff61c905ad065e272c2885

libminijail_test: Format code, add .clang-format file.

2016-02-05T23:13:52+00:00

Bug: None
Change-Id: I588a62af0b533f301391a51ebb1d7654d86b30e7

Add check for supplementary groups.

2016-02-05T19:18:02+00:00

This binary will be used by a new Brillo Autotest test.

Also tie the return value of the binary to the result of the checks =).

Bug: 25368607
Change-Id: Ia338cb8270916cafdbbfbbb8808b88759906327f

Add libminijail test executable.

2016-02-03T23:04:12+00:00

This is useful to test basic Minijail functionality and will be used by
future Autotest tests. The code is currently very similar to
'drop_privs.cpp', but I expect that to change in the future.

Bug: 25368607
Change-Id: I4db3359b07c3b37fa4ac9e24598a5d21623383d5

Minijail: allow writing to the child process' standard input.

2012-09-04T20:03:36+00:00

BUG=chromium-os:33983
TEST=libminijail_unittest
TEST=security_Minijail0

Change-Id: Ic2373127b3bca6a4a4a05ffcbc48b486cb5eb4a6
Reviewed-on: https://gerrit.chromium.org/gerrit/31779
Tested-by: Jorge Lucangeli Obes 
Reviewed-by: Jorge Lucangeli Obes 
Commit-Ready: Jorge Lucangeli Obes

Add full seccomp BPF filter generation.

2012-04-29T20:24:36+00:00

This CL uses the mechanism to generate filter sections from
policy strings and builds a complete filter by first
validating the arch and loading the syscall number, then
checking against all syscalls listed in the policy file, and
executing the argument filters if necessary.

BUG=chromium-os:25429
BUG=chromium-os:27878
TEST=syscall_filter_unittest
CQ-DEPEND=I3a4334a3c568178e19b18e7f3ed97517b03afd1b

Change-Id: I13a9b22ac8d55f02d5a77b5beedb955386b63723
Reviewed-on: https://gerrit.chromium.org/gerrit/19007
Tested-by: Jorge Lucangeli Obes 
Reviewed-by: Kees Cook 
Commit-Ready: Jorge Lucangeli Obes 
Reviewed-by: Will Drewry