aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Snap for 4745538 from 8cb0dee4f17433d883b5029873dd555270f3dcab to pi-releaseandroid-wear-9.0.0_r9android-wear-9.0.0_r8android-wear-9.0.0_r7android-wear-9.0.0_r6android-wear-9.0.0_r5android-wear-9.0.0_r4android-wear-9.0.0_r3android-wear-9.0.0_r23android-wear-9.0.0_r22android-wear-9.0.0_r21android-wear-9.0.0_r20android-wear-9.0.0_r2android-wear-9.0.0_r19android-wear-9.0.0_r18android-wear-9.0.0_r17android-wear-9.0.0_r16android-wear-9.0.0_r15android-wear-9.0.0_r14android-wear-9.0.0_r13android-wear-9.0.0_r12android-wear-9.0.0_r11android-wear-9.0.0_r10android-wear-9.0.0_r1android-vts-9.0_r9android-vts-9.0_r8android-vts-9.0_r7android-vts-9.0_r6android-vts-9.0_r5android-vts-9.0_r4android-vts-9.0_r14android-vts-9.0_r13android-vts-9.0_r12android-vts-9.0_r11android-vts-9.0_r10android-cts-9.0_r9android-cts-9.0_r8android-cts-9.0_r7android-cts-9.0_r6android-cts-9.0_r5android-cts-9.0_r4android-cts-9.0_r3android-cts-9.0_r2android-cts-9.0_r13android-cts-9.0_r12android-cts-9.0_r11android-cts-9.0_r10android-cts-9.0_r1android-9.0.0_r9android-9.0.0_r8android-9.0.0_r7android-9.0.0_r60android-9.0.0_r6android-9.0.0_r59android-9.0.0_r58android-9.0.0_r57android-9.0.0_r56android-9.0.0_r55android-9.0.0_r54android-9.0.0_r53android-9.0.0_r52android-9.0.0_r51android-9.0.0_r50android-9.0.0_r5android-9.0.0_r49android-9.0.0_r48android-9.0.0_r3android-9.0.0_r2android-9.0.0_r18android-9.0.0_r17android-9.0.0_r10android-9.0.0_r1security-pi-releasepie-vts-releasepie-security-releasepie-s2-releasepie-release-2pie-releasepie-r2-s2-releasepie-r2-s1-releasepie-r2-releasepie-platform-releasepie-gsipie-cuttlefish-testingpie-cts-releaseandroid-build-team Robot2018-04-261-0/+10
|\ | | | | | | Change-Id: I29e871b4fd3b068a7992b4031d5ef4aa190040d2
| * Support building a host version of minijail0android-9.0.0_r47android-9.0.0_r46android-9.0.0_r45android-9.0.0_r44android-9.0.0_r43android-9.0.0_r42android-9.0.0_r41android-9.0.0_r40android-9.0.0_r39android-9.0.0_r38android-9.0.0_r37android-9.0.0_r36android-9.0.0_r35android-9.0.0_r34android-9.0.0_r33android-9.0.0_r32android-9.0.0_r31android-9.0.0_r30android-9.0.0_r22android-9.0.0_r21android-9.0.0_r20android-9.0.0_r19android-9.0.0_r16android-9.0.0_r12android-9.0.0_r11pie-qpr3-s1-releasepie-qpr3-releasepie-qpr3-b-releasepie-qpr2-releasepie-qpr1-s3-releasepie-qpr1-s2-releasepie-qpr1-s1-releasepie-qpr1-releasepie-dr1-releasepie-dr1-devpie-devpie-b4s4-releasepie-b4s4-devLuis Hector Chavez2018-04-241-0/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | This change enables building a host version of minijail0. This is desirable to run some host tests. Bug: 78307138 Test: m out/host/linux-x86/bin/minijail0 && \ out/host/linux-x86/bin/minijail0 -h Change-Id: Iceb7f75d44c09dd8934ef3a9a70edb72ca94d3a4 Merged-Id: I7f29a8b04842fcd6a5054aebb54a97b3aa815124 (cherry picked from commit 413af658ee448c138830b3bc7eecb972f18fb6fc)
* | Snap for 4725392 from a62adc603a01f5f7ae1e7c8b403d69486d3657bb to pi-releaseandroid-build-team Robot2018-04-172-0/+56
|\| | | | | | | Change-Id: I034de66f6b39b5dc2d90b3e3f2728da8a6fa7e12
| * Mark libminijail as VNDKLogan Chien2018-03-312-0/+56
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit marks libminijail as a VNDK library so that the vendor variant can be installed into /system/lib[64]/vndk instead of /vendor/lib[64]. This library was not a VNDK library in Android O because its Android.mk hasn't been converted to Android.bp at the time. Thus, we were asking vendors to use libminijail_vendor instead and omx implementation has to use libavservice_minijail_vendor. Since Android.mk has been converted to Android.bp, it would be great to mark this library as VNDK library so that libminijail can be updated through system-only OTAs. Bug: 63866913 Test: Build sailfish and libminijail.so should be installed into /system/lib[64]/vndk/libminijail.so instead of /vendor/lib[64]/libminijail.so. Change-Id: Ia03d2ec7ae43f3a316815087fd192e0b8ab0456f Merged-In: Ia03d2ec7ae43f3a316815087fd192e0b8ab0456f (cherry picked from commit 9460f604ec32e8fc78d65ace02d025e249aa4b14)
* | Snap for 4628106 from 69eca6c779e493ecbfa33a320410ad6ee27fcc2b to pi-releaseandroid-build-team Robot2018-03-015-16/+94
|\| | | | | | | Change-Id: I740367d1be52360f70ef7772f9439ca344dead2f
| * extend -K to accept a mount propagation type am: 785b1c3b30 am: 3230c5fe3dMike Frysinger2018-02-285-16/+94
| |\ | | | | | | | | | | | | | | | am: ac62b6d73a Change-Id: I8e6fea241c4dc75096be6ae521d3b190c01acc43
| | * extend -K to accept a mount propagation type am: 785b1c3b30Mike Frysinger2018-02-285-16/+94
| | |\ | | | | | | | | | | | | | | | | | | | | am: 3230c5fe3d Change-Id: Ia46eebd346496b076837dfa56a78c43708f2044b
| | | * extend -K to accept a mount propagation typeMike Frysinger2018-02-285-16/+94
| | | |\ | | | | | | | | | | | | | | | | | | | | | | | | | am: 785b1c3b30 Change-Id: I685c081249df29f3321fe28db5b1528b7b73658a
| | | | * extend -K to accept a mount propagation typeandroid-p-preview-1Mike Frysinger2018-02-285-16/+94
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | By default, minijail will mark all mounts as private. The -K flag allows them to skip that step which will retain all existing mount settings. We now have scenarios where we want to share some mount points, so lets extend -K to accept the propagation mode. This lets people use -Kslave and mark all the mount points as slaves. Bug: chromium:813131 Test: `make check` and using -Kslave allows changes in the parent namespace Change-Id: I571e402a383ecf60a6104f87ef97b76710a34d38
* | | | | Snap for 4620899 from 35b33b92bacefebb0f84fe446d5c996735c68221 to pi-releaseandroid-build-team Robot2018-02-254-7/+100
|\| | | | | | | | | | | | | | | | | | | Change-Id: Iabfe08ff39c08acb9f6e87516ea8538bf1092fad
| * | | | create parent paths of target mounts as needed am: 5fdba4ed28 am: 13fb44d0feMike Frysinger2018-02-244-7/+100
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | am: b2d99d4799 Change-Id: Ie5c7c7f08202a6f57a61261e5122419cf75517bb
| | * | | create parent paths of target mounts as needed am: 5fdba4ed28Mike Frysinger2018-02-244-7/+100
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | am: 13fb44d0fe Change-Id: I184e604c30702c49a024ab06c5982e62328833a2
| | | * | create parent paths of target mounts as neededMike Frysinger2018-02-244-7/+100
| | | |\| | | | | | | | | | | | | | | | | | | | | | | | | | am: 5fdba4ed28 Change-Id: I7253a2a7d0423d2156dcef9ddc9891feb6e8844d
| | | | * create parent paths of target mounts as neededMike Frysinger2018-02-234-7/+100
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently if you want to bind mount a single subdir, you have to make sure to create the full parent directory chain. For example, if you want /var/lib/timezone/ but not the rest of /var, you have to do: -k none,/var,tmpfs -k none,/var/lib,tmpfs -b /var/lib/timezone/ For every additional subdir, you need to add another -k option just to do an [effective] mkdir with a tmpfs mount. The current -k/-b behavior is to run mkdir if the target doesn't already exist, but only for the final target. Lets extend it to also create any missing parent paths, so now only the base path needs to be writable: -k none,/var,tmpfs -b /var/lib/timezone/ Bug: None Test: `minijail0 --profile minimalistic-mountns -k none,/var,tmpfs -b /var/lib/timezone /bin/date` works Change-Id: I7f36bcb445ce40ed66a9403a4ee1c1fe3f9e5ea8
* | | | | Snap for 4590521 from 8e193ad5123f0929ddb865a49a665f79724f2fa9 to pi-releaseandroid-build-team Robot2018-02-071-2/+4
|\| | | | | | | | | | | | | | | | | | | Change-Id: I254a78e57704b81ef2341e7a876e2f17d8d0fd17
| * | | | minijail0_cli_unittest: fix random crashes/failures am: 9741372f23 am: ↵Mike Frysinger2018-02-061-2/+4
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0d40743b67 am: 450c08b692 Change-Id: I8a6e71d6a703bddaccc36887c8a89fcd7da6d30b
| | * | | minijail0_cli_unittest: fix random crashes/failures am: 9741372f23Mike Frysinger2018-02-061-2/+4
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | am: 0d40743b67 Change-Id: I5c89f0d0a8c359d639540c6a104fd6da5dd9aa9c
| | | * | minijail0_cli_unittest: fix random crashes/failuresMike Frysinger2018-02-061-2/+4
| | | |\| | | | | | | | | | | | | | | | | | | | | | | | | | am: 9741372f23 Change-Id: Ica3b6c63a09749bf7887b250cea0d42c65e5eb01
| | | | * minijail0_cli_unittest: fix random crashes/failuresMike Frysinger2018-02-051-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The GNU getopt API cannot handle being passed different argv vectors by default. Changing optind back to 1 will trigger a reset of state, but only relative to the previous argv getopt saw. Instead, optind has to be set to 0 so all internal state is reset. This extension is from GNU (glibc), but Android's bionic also supports it. Otherwise, when we pass in a different argv, the internal state might randomly refer to the old argv memory which in turn can lead to random errors or memory violations. Bug: None Test: `./minijail0_cli_unittest --gtest_repeat=-1` no longer randomly crashes Change-Id: I79276518bb51e297719049c7efa9824d6f97c7ab
* | | | | Snap for 4577102 from 7640664b6dfcada0b24fd0912acf7d2fbfb784c0 to pi-releaseandroid-build-team Robot2018-01-313-3/+34
|\| | | | | | | | | | | | | | | | | | | Change-Id: I941abca9dd8e048f686d55bae1f260e8d6a2cdd9
| * | | | minijail0: fix multiple data options with the -k mount am: 4f3e09f23a am: ↵Mike Frysinger2018-01-313-3/+34
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | e998c8fdc2 am: b94b51bf98 Change-Id: I2e0b5fee84c1bfde0c9c4da613830aa3c1ef8532
| | * | | minijail0: fix multiple data options with the -k mount am: 4f3e09f23aMike Frysinger2018-01-313-3/+34
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | am: e998c8fdc2 Change-Id: I3f607bb6129e7802178bcc9e6094c52061a296de
| | | * | minijail0: fix multiple data options with the -k mountMike Frysinger2018-01-313-3/+34
| | | |\| | | | | | | | | | | | | | | | | | | | | | | | | | am: 4f3e09f23a Change-Id: I04e27c57cdf48cb4766d9bdb43244d096b4deefb
| | | | * minijail0: fix multiple data options with the -k mountMike Frysinger2018-01-313-3/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The recent fix for optional fields (fea05c6dcac6b69e9cc7ba03ee9c3d074) broke passing in multiple mount options with the -k flag. Fix it and add a unittest to prevent regression. Bug: None Test: `make check` passes Test: `./minijail0 -v -k none,/tmp,tmpfs,0xe,uid=10,mode=0755 /bin/ls -al /tmp/` works again Change-Id: Ia9fe9dec4a16654fc9a32414586a8c39d22692eb
* | | | | Snap for 4574286 from 4dcfe93e345084bd0f5b9760e134a4722efee122 to pi-releaseandroid-build-team Robot2018-01-305-10/+45
|\| | | | | | | | | | | | | | | | | | | Change-Id: Id3e318809f6f7618ca360cf2d0cd8fd8d5f3e0d7
| * | | | Use rlim_t for the arguments in minijail_rlimit() am: 7058a2debe am: d810e03405Luis Hector Chavez2018-01-305-10/+45
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | am: 5c016c17a8 Change-Id: I7b2c5c93d58330db6f772cf85bee17018403bb69
| | * | | Use rlim_t for the arguments in minijail_rlimit() am: 7058a2debeLuis Hector Chavez2018-01-305-10/+45
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | am: d810e03405 Change-Id: I2c03052acfb9dd484a411877fca8a47cdd17672d
| | | * | Use rlim_t for the arguments in minijail_rlimit()Luis Hector Chavez2018-01-305-10/+45
| | | |\| | | | | | | | | | | | | | | | | | | | | | | | | | am: 7058a2debe Change-Id: I52a3b9e7047597b6b5a0f17aa5ea8aed6a5b4ae2
| | | | * Use rlim_t for the arguments in minijail_rlimit()Luis Hector Chavez2018-01-295-10/+45
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This changes the type used to pass the value of the limit from uint32_t to rlim_t, which makes it possible to pass in RLIM_INFINITY in 64-bit environments. Bug: None Test: minijail_rlimit(j, RLIMIT_STACK, RLIM_INFINITY, RLIM_INFINITY); Change-Id: I6bbf956974c7f28a2e0bb8ad3efb4d25c5675593
* | | | | merge in pi-release history after reset to mastergitbuildkicker2018-01-290-0/+0
|\ \ \ \ \
| * \ \ \ \ merge in pi-release history after reset to mastergitbuildkicker2018-01-290-0/+0
| |\ \ \ \ \ | |/ / / / / |/| | | | |
* | | | | | Snap for 4571561 from 25600c806806e9acd26a06efca4954a83f20642c to pi-releaseandroid-build-team Robot2018-01-286-7/+472
|\ \ \ \ \ \ | |/ / / / / |/| / / / / | |/ / / / Change-Id: I90834b0b3dda3bc0bb01aba532cb471785eb0fac
| * | | | add unittests for the minijail0 cli am: 4d2a81e578 am: 79d80def4bMike Frysinger2018-01-265-0/+447
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | am: 0d14394e89 Change-Id: Iad6f8cf663a5fddc9fc42132f6ebed06251e4142
| | * | | add unittests for the minijail0 cli am: 4d2a81e578Mike Frysinger2018-01-265-0/+447
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | am: 79d80def4b Change-Id: I9c7c6d9750f09229569d03ba0e22fffbcb972d5c
| | | * | add unittests for the minijail0 cliMike Frysinger2018-01-265-0/+447
| | | |\| | | | | | | | | | | | | | | | | | | | | | | | | | am: 4d2a81e578 Change-Id: I428504c39250fc76ed86647b450614dcdab25a77
| | | | * add unittests for the minijail0 cliMike Frysinger2018-01-265-0/+447
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug: None Test: `make check` passes Change-Id: I927a609453881e045e07013b7cca8594cc5e972c
| * | | | drop unnecessary warning disable flag am: d7d5df3202 am: 0513e184aeMike Frysinger2018-01-261-1/+0
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | am: f65e12c23d Change-Id: I11d3c191fad8b352c97186015df7c6d226736cfb
| | * | | drop unnecessary warning disable flag am: d7d5df3202Mike Frysinger2018-01-261-1/+0
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | am: 0513e184ae Change-Id: I2d48aba95aeb314956432aaef9e39f8163d78128
| | | * | drop unnecessary warning disable flagMike Frysinger2018-01-261-1/+0
| | | |\| | | | | | | | | | | | | | | | | | | | | | | | | | am: d7d5df3202 Change-Id: I19698089aab9302ccbfc992f605381a56781dcb1
| | | | * drop unnecessary warning disable flagMike Frysinger2018-01-261-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The previous commit cleaned up the code that needed this. Bug: None Test: local android build passes Change-Id: Ife454147acc0e5f80d539577df4d5400c169ef28
| * | | | add seccomp syscall fallbacks am: 8022e14021 am: 1099596098Mike Frysinger2018-01-261-0/+19
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | am: 6c15e79b19 Change-Id: Ibc3a18fdda6d34765755eab2b2d5bb0ab9c09681
| | * | | add seccomp syscall fallbacks am: 8022e14021Mike Frysinger2018-01-251-0/+19
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | am: 1099596098 Change-Id: I1cefe023367ce0f855134da3501047b47541647f
| | | * | add seccomp syscall fallbacksMike Frysinger2018-01-251-0/+19
| | | |\| | | | | | | | | | | | | | | | | | | | | | | | | | am: 8022e14021 Change-Id: Ic6501dad6610f047340727dda9f2aa15d9ba120b
| | | | * add seccomp syscall fallbacksMike Frysinger2018-01-251-0/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some of the android prebuilts use linux 3.2.14 which don't include the seccomp syscall define. Add some fallbacks for the main arches we have support for in android. The rest we'll force to update. Bug: None Test: build passes for host Change-Id: I00bd3aeaed7df32cc28aee9ccd0172a1d0bd2a6c
| * | | | minijail: Prefix unit test binaries to avoid confusion. am: 1ed75bc11e am: ↵Jorge Lucangeli Obes2018-01-261-6/+6
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | b51e0ca61e am: 5e692e3d57 Change-Id: I35de0808c1a78ea2bb09ef50dd8d82d5400d5509
| | * | | minijail: Prefix unit test binaries to avoid confusion. am: 1ed75bc11eJorge Lucangeli Obes2018-01-251-6/+6
| | |\| | | | | | | | | | | | | | | | | | | | | | | | | | | am: b51e0ca61e Change-Id: Ie0afca613f81922743083a8c0a99144712d1f85a
| | | * | minijail: Prefix unit test binaries to avoid confusion.Jorge Lucangeli Obes2018-01-251-6/+6
| | | |\| | | | | | | | | | | | | | | | | | | | | | | | | | am: 1ed75bc11e Change-Id: Ia9618902b9980756dd381a5a28be0bf21ae2f152
| | | | * minijail: Prefix unit test binaries to avoid confusion.Jorge Lucangeli Obes2018-01-251-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | These unit test binaries will be listed alongside many others from Android. Prefix them to avoid confusion. Bug: 72386870 Test: make, check host and target output. Change-Id: I56779fa468c43924604d3dc97e4b8534b4888508
* | | | | Snap for 4565898 from af6b32c867678bed7fcfa7557a7d29c350f7273e to pi-releaseandroid-build-team Robot2018-01-257-760/+806
|\| | | | | | | | | | | | | | | | | | | Change-Id: Ic8bbfcdc1b2e3e13abcfe0d754207618ee3b043b
| * | | | drop unnecessary variable initializer am: 06cacc9c74 am: a21526d7bfMike Frysinger2018-01-241-1/+1
| |\| | | | | | | | | | | | | | | | | | | | | | | | | | | | am: 11f2a4c978 Change-Id: I4295b7d10fb664bbfda5c03a8bcfd9a8c723772b