unit.git - Universal Web Application Server

Age	Commit message (Collapse)	Author	Files	Lines
2022-08-02	Including <mntent.h> iff it exists.	Alejandro Colomar	1	-0/+13
	With NXT_HAVE_PIVOT_ROOT, we had issues in MacOS. Headers should normally be included unconditionally, except of course if they don't exist. This fixes part of the #737 issue on GitHub.
2022-07-18	Replaced Linux syscall macros by libc macros.	Alejandro Colomar	1	-2/+2
	User-space programs should use the SYS_*form, as documented in syscall(2). That also adds compatibility to non-Linux systems.
2020-06-23	Isolation: fixed build when features aren't detected.	Tiago Natel de Moura	1	-18/+2

2020-05-28	Added "rootfs" feature.	Tiago Natel de Moura	1	-0/+130

2019-12-06	Isolation: allowed the use of credentials with unpriv userns.	Tiago Natel	1	-0/+5
	The setuid/setgid syscalls requires root capabilities but if the kernel supports unprivileged user namespace then the child process has the full set of capabilities in the new namespace, then we can allow setting "user" and "group" in such cases (this is a common security use case). Tests were added to ensure user gets meaningful error messages for uid/gid mapping misconfigurations.
2019-09-19	Initial applications isolation support using Linux namespaces.	Tiago de Bem Natel de Moura	1	-0/+52