 Daniel Golle
|
a8cf548026
jail: fix copy & paste error in parseOCIlinux()
|
6 months ago |
|
Daniel Golle
|
6b9629b744
jail: don't assume positive return value of creat
|
2 years ago |
 Philipp Meier
|
24f6bc4322
jail: correctly check for null pointer
|
2 years ago |
 Christian Marangi
|
ef5d3e36e8
jail: fix various ignoring return value compilation warning
|
2 years ago |
|
Daniel Golle
|
bb95fe8df7
jail: make sure jailed process is terminated
|
3 years ago |
|
Daniel Golle
|
9d1431e130
jail: allow passing environment variable to procd jailed process
|
3 years ago |
|
Daniel Golle
|
82dd39024f
jail: make use of per-container netifd via ubus
|
3 years ago |
|
Daniel Golle
|
324ebd0a3c
jail: fs: add support for asymmetric mount bind
|
3 years ago |
|
Daniel Golle
|
1eb4371e25
jail: start ubus and netifd instances for container with netns
|
3 years ago |
|
Daniel Golle
|
482d1ab85f
Revert "jail: do not hack /etc/resolv.conf on container rootfs"
|
3 years ago |
|
Daniel Golle
|
a23c888729
jail: prepare for adding process to existing namespace
|
3 years ago |
|
Daniel Golle
|
167dc249b0
jail: protect against strcat buffer overflows
|
3 years ago |
|
Daniel Golle
|
af048a34bc
jail: use portable sizeof(void *)
|
3 years ago |
|
Daniel Golle
|
3edb7ebecb
jail: check return value when opening console
|
3 years ago |
|
Daniel Golle
|
0603c8d5b0
jail: return to hook callback instead of just calling it
|
3 years ago |
|
Daniel Golle
|
7f2398e789
jail: devices: create parent folder when creating devices
|
3 years ago |
|
Daniel Golle
|
459b3e84ef
jail: fix several issues discovered by Coverity
|
3 years ago |
|
Daniel Golle
|
516bdf26d4
jail: don't ignore return value of write()
|
3 years ago |
|
Daniel Golle
|
220b7160db
jail: ignore return value when creating default /dev symlinks
|
3 years ago |
|
Daniel Golle
|
548d057b5f
jail: don't ignore return value of seteuid()
|
3 years ago |
|
Daniel Golle
|
9bd1b7f095
jail: refactor directory handling for rootfs and overlaydir
|
3 years ago |
|
Daniel Golle
|
05459054fb
jail: make use of realpath() for rootfs and overlaydir
|
3 years ago |
|
Daniel Golle
|
0114c6fc8b
jail: open() extroot folder before mounting
|
3 years ago |
|
Daniel Golle
|
15997e67a5
jail: allow rootfs to be a symbolic link
|
3 years ago |
|
Daniel Golle
|
92aba532aa
jail: increase max additional env records to 64
|
3 years ago |
|
Daniel Golle
|
b0a8ea1c3f
jail: do not hack /etc/resolv.conf on container rootfs
|
3 years ago |
|
Daniel Golle
|
2dcefbd609
jail: add support for cgroup devices as in OCI run-time spec
|
3 years ago |
 Rosen Penev
|
64e9f3a4ef
procd: fix compilation with newer musl
|
3 years ago |
|
Daniel Golle
|
92c8e8f3c6
jail: remove duplicate check for hook file permissions
|
4 years ago |
|
Daniel Golle
|
7f12c89d0b
treewide: replace local mkdir_p implementations
|
4 years ago |
