Alexander Larsson 57f9d6c294 Run setup_newroot in an unprivileged child process ...

All privileged operations (just the mounts) are marshalled over to the
privileged parent via a AF_UNIX socketpair.

2016-02-18 11:16:02 +01:00

demos

Rename binary to bwrap

2016-02-18 08:45:44 +01:00

.gitignore

Rename to bubblewrap

2016-02-17 11:54:21 +01:00

autogen.sh

Initial version

2016-02-15 15:13:16 +01:00

bind-mount.c

Rename to bubblewrap

2016-02-17 11:54:21 +01:00

bind-mount.h

Rename to bubblewrap

2016-02-17 11:54:21 +01:00

bubblewrap.c

Run setup_newroot in an unprivileged child process

2016-02-18 11:16:02 +01:00

configure.ac

Rename to bubblewrap

2016-02-17 11:54:21 +01:00

Makefile.am

Add test targets to make the binary setuid or setcaps

2016-02-18 08:54:42 +01:00

network.c

Rename to bubblewrap

2016-02-17 11:54:21 +01:00

network.h

Rename to bubblewrap

2016-02-17 11:54:21 +01:00

utils.c

Rename to bubblewrap

2016-02-17 11:54:21 +01:00

utils.h

Rename to bubblewrap

2016-02-17 11:54:21 +01:00

Description

Unprivileged sandboxing tool

linux-containersuser-namespaces

15 MiB

Languages

C 66.4%

Shell 12.8%

Python 8.4%

M4 6.8%

Makefile 5.6%