projectatomic/bubblewrap
1
0
Fork 0
mirror of https://github.com/projectatomic/bubblewrap.git synced 2026-02-06 18:46:08 +01:00
Code Issues Releases Activity
40 Commits 14 Branches 27 Tags
privilege-separation
Commit Graph

40 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Alexander Larsson
57f9d6c294 Run setup_newroot in an unprivileged child process 
All privileged operations (just the mounts) are marshalled over to the
privileged parent via a AF_UNIX socketpair.
 2016-02-18 11:16:02 +01:00
Alexander Larsson
bf40fe6c76 Split out the root setup into setup_newroot() helper 2016-02-18 11:12:19 +01:00
Alexander Larsson
6e76993271 Remove a bunch of unnecessary local variables 
We already have a SetupOp *op, lets reuse that.
 2016-02-18 11:10:44 +01:00
Alexander Larsson
230e4add46 Add test targets to make the binary setuid or setcaps 2016-02-18 08:54:42 +01:00
Alexander Larsson
c79b61e90a Rename binary to bwrap 
This is shorter and less cutesy
 2016-02-18 08:45:44 +01:00
Alexander Larsson
ea4098a39e Merge pull request #7 from cgwalters/demos-dir 
Move xdg-app-run.sh into demos/, add new bubblewrap-shell.sh
 2016-02-18 08:39:53 +01:00
Colin Walters
a998dedf7d Move xdg-app-run.sh into demos/, add new bubblewrap-shell.sh 
Let's accumulate use cases/tests here.
 2016-02-17 17:36:21 -05:00
Alexander Larsson
92712d8cd5 Rename to bubblewrap 2016-02-17 11:54:21 +01:00
Alexander Larsson
e9bb28d60d Merge pull request #1 from matthiasclasen/typo-fixes 
Just some typos
 2016-02-17 07:39:00 +01:00
Matthias Clasen
85a6cfb80e A few more typos 2016-02-16 21:21:41 -05:00
Matthias Clasen
297f774333 Spelling consistency 
Don't mix "pid1" and "pid 2". Just always say "pid n".
 2016-02-16 20:45:22 -05:00
Matthias Clasen
a56ca950a8 Fix some typos 2016-02-16 20:41:00 -05:00
Alexander Larsson
4457439a30 Fix privileged mode 
It needs cap_sys_chroot too
 2016-02-16 21:59:14 +01:00
Alexander Larsson
055ade8fc3 Handle already existing directories 2016-02-16 21:54:33 +01:00
Alexander Larsson
85563b872f Add --sync-fd 2016-02-16 21:34:11 +01:00
Alexander Larsson
3bc40d380f Add --lock-file support 2016-02-16 18:54:43 +01:00
Alexander Larsson
2594c99f1a Example script to run xdg-app 2016-02-16 17:13:30 +01:00
Alexander Larsson
5e501f97e9 Add --mount-[ro-]bind-dir 
This lets you mount everything in a dir other than what you already
set up. For instance everything in /usr/etc to /etc.
 2016-02-16 17:12:20 +01:00
Alexander Larsson
f5b006ff0c Support --make-file 2016-02-16 15:55:08 +01:00
Alexander Larsson
0bf9bc3d0b Add --mount-dev-bind support 2016-02-16 13:51:12 +01:00
Alexander Larsson
7bb2f8fa74 Add support for --mount-ro-bind 2016-02-16 12:58:40 +01:00
Alexander Larsson
e18addcbff Add gitignore file 2016-02-16 12:41:25 +01:00
Alexander Larsson
c4d5478a14 Create dest parent dirs ahead of time 2016-02-16 12:39:05 +01:00
Alexander Larsson
68c810091b Support --make-passwd and --make-group 2016-02-16 12:35:49 +01:00
Alexander Larsson
d0a8556ed1 Create /dev/ptmx and /dev/shm 2016-02-16 12:12:40 +01:00
Alexander Larsson
c37ab5bbc7 Add --make-dir and --make-symlink 2016-02-16 12:06:03 +01:00
Alexander Larsson
8ca640aa7b Support --mount-dev 2016-02-16 11:56:50 +01:00
Alexander Larsson
de5c7c2e59 Support --mount-proc 2016-02-16 11:25:30 +01:00
Alexander Larsson
fc34e6b8d5 Fix bind mounts 2016-02-16 11:08:01 +01:00
Alexander Larsson
70f6a1a592 Support non-directory bind sources 2016-02-16 10:51:37 +01:00
Alexander Larsson
c68e0dfef6 Add some more util funcs and clean up utils.c 2016-02-16 10:51:18 +01:00
Alexander Larsson
9647339d69 Add more usage docs 2016-02-16 10:08:38 +01:00
Alexander Larsson
5d5f8e9614 Break out bind_mount() to separate file 2016-02-16 10:03:46 +01:00
Alexander Larsson
5422cd3952 Remove unused functions (for now) 2016-02-16 09:56:37 +01:00
Alexander Larsson
dafe63b41e Move more helper functions to utils.c 2016-02-16 09:55:01 +01:00
Alexander Larsson
5556d20fd5 Split out network functions to separate file 2016-02-16 09:41:01 +01:00
Alexander Larsson
2f58265dce Break out utils to separate file 2016-02-16 09:36:33 +01:00
Alexander Larsson
579149d599 Fix uid/gid map workaround 2016-02-16 09:16:42 +01:00
Alexander Larsson
8014b43b7f more work 2016-02-15 17:25:59 +01:00
Alexander Larsson
9f8d6880a8 Initial version 2016-02-15 15:13:16 +01:00