Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2022-04-26 | Fixed indentation. | Alejandro Colomar | 1 | -1/+1 | |
Some lines (incorrectly) had an indentation of 3 or 5, or 7 or 9, or 11 or 13, or 15 or 17 spaces instead of 4, 8, 12, or 16. Fix them. Found with: $ find src -type f | xargs grep -n '^ [^ ]'; $ find src -type f | xargs grep -n '^ [^ *]'; $ find src -type f | xargs grep -n '^ [^ ]'; $ find src -type f | xargs grep -n '^ [^ *]'; $ find src -type f | xargs grep -n '^ [^ +]'; $ find src -type f | xargs grep -n '^ [^ *+]'; $ find src -type f | xargs grep -n '^ [^ +]'; $ find src -type f | xargs grep -n '^ [^ *+]'; | |||||
2019-12-06 | Isolation: allowed the use of credentials with unpriv userns. | Tiago Natel | 1 | -65/+246 | |
The setuid/setgid syscalls requires root capabilities but if the kernel supports unprivileged user namespace then the child process has the full set of capabilities in the new namespace, then we can allow setting "user" and "group" in such cases (this is a common security use case). Tests were added to ensure user gets meaningful error messages for uid/gid mapping misconfigurations. | |||||
2019-09-20 | Closing leaking file descriptor. | Tiago Natel | 1 | -0/+4 | |
Found by Coverity (CID 349484). | |||||
2019-09-19 | Initial applications isolation support using Linux namespaces. | Tiago de Bem Natel de Moura | 1 | -0/+263 | |