Gitiles
Code Review Sign In
android-review.linaro.org / platform / external / sandboxed-api / 044ba1cb90cd9947141f87225a02a3cfd7e868f8
  1. 044ba1c Return ENOSYS instead of hard denying clone3 by Wiktor Garbacz · 5 months ago
  2. 29a3b8c Add AllowAccess to SAPI's default policy by Wiktor Garbacz · 5 months ago
  3. b9c84a1 Allow restartable sequences access to poll. by Chris Kennelly · 5 months ago
  4. 0e98cce Permit TCMalloc to use MAP_FIXED_NOREPLACE. by Chris Kennelly · 5 months ago
  5. f2840b3 NullPtr: Change SAPI to accept regular `nullptr` for sandboxed API calls. by Oliver Kunz · 5 months ago
  6. fa53603 Use `absl::string_view` consistently by Wiktor Garbacz · 5 months ago
  7. 25cfb5e Adding missing syscalls to the syscall tables. by Sandboxed API Team · 5 months ago
  8. 824d894 Make sandbox2::SyscallTable::GetEntry public and add new helper GetEntries. by Sandboxed API Team · 5 months ago
  9. 28b4567 Allow `sched_getaffinity` in `AllowLlvmSanitizers` by Wiktor Garbacz · 5 months ago
  10. fbfc2b9 Handle `prlimit64` in `Allow*RLimit` by Wiktor Garbacz · 5 months ago
  11. 9a06f3a Change the order of including system include paths. by Sandboxed API Team · 5 months ago
  12. a56660f Allow restartable sequences' mmaps to name their VMAs. by Chris Kennelly · 5 months ago
  13. fc610b7 Fix UB caused by uninitialized value. by Sandboxed API Team · 6 months ago
  14. 1339d0b Remove unneeded include by Wiktor Garbacz · 6 months ago
  15. 52babc1 logserver: Support non-UTF8 log messages by Wiktor Garbacz · 6 months ago
  16. e5370e9 Minor cleanups, no functional change. by Sandboxed API Team · 6 months ago
  17. 36e4b80 Introduce and prefer `AllowMmapWithoutExec` by Wiktor Garbacz · 6 months ago
  18. 1255f57 Provide an option to use the unotify monitor instead of the ptrace monitor. by Oliver Kunz · 6 months ago
  19. 0a992b6 Add special handling for global forkserver by Wiktor Garbacz · 6 months ago
  20. d95df64 Add a test for custom forkserver by Wiktor Garbacz · 6 months ago
  21. 39e4954 The current implementation of `Sandbox::Terminate` results in timeout's being reported to coroner in cases where a Restart or Terminate with graceful exit is requested. by Oliver Kunz · 6 months ago
  22. 19d8f47 Add clone3 to syscall defs by Wiktor Garbacz · 6 months ago
  23. 4d34bdb Integrate LLVM at llvm/llvm-project@3287ae8f6520 by Dmitri Gribenko · 7 months ago
  24. 5ed720e SAPI_RAW_CHECK expects NUL-terminated strings by Wiktor Garbacz · 7 months ago
  25. a0ba1c5 Enable the ability to change the sandboxee's malloc implementation. The default is set to "@bazel_tools//tools/cpp:malloc", which is also the default for Bazel's cc_binary [1]. by Oliver Kunz · 7 months ago
  26. 9a171c7 Fix quoting for fedora build action by Wiktor Garbacz · 7 months ago
  27. dc8bcc9 Update github actions OS and dependencies versions by Wiktor Garbacz · 7 months ago
  28. 15fb5b9 Allow sigaltstack by Wiktor Garbacz · 7 months ago
  29. bc3c0ec Internal change by Wiktor Garbacz · 7 months ago
  30. 1bad376 Block `sigaltstack` with `ENOSYS` by default by Wiktor Garbacz · 7 months ago
  31. 6f90a6e don't drop CAP_SYS_PTRACE as it is apparently needed by sandbox by Sandboxed API Team · 8 months ago
  32. 79ab44c drop almost all capabilities during sandbox creation by Sandboxed API Team · 8 months ago
  33. 4630346 Fix unaligned load by Wiktor Garbacz · 8 months ago
  34. 0940a9e Export `config.h` from `syscall.h` for `sapi::cpu::Architecture` by Wiktor Garbacz · 9 months ago
  35. 37a7432 Remove deprecated comms functions by Wiktor Garbacz · 9 months ago
  36. fadfa79 Add missing return by Wiktor Garbacz · 9 months ago
  37. ee7b76f Automated rollback of commit 4ae281b6a25334da65c441885849c61a12ecd2b3. by Sandboxed API Team · 9 months ago
  38. 4ae281b Remove deprecated comms functions by Wiktor Garbacz · 9 months ago
  39. 9a985f9 Replace use of deprecated `sandbox2::Comms` functions by Wiktor Garbacz · 9 months ago
  40. 227daf4 Do 1 level of recursion on libunwind crashes by Wiktor Garbacz · 9 months ago
  41. 1cf45be Refactor Comms to split out listening/connecting part by Wiktor Garbacz · 9 months ago
  42. d26262d Remove stale comment by Wiktor Garbacz · 9 months ago
  43. 37b3a51 Use empty instead of length by Sandboxed API Team · 9 months ago
  44. f5830c9 Ensure that TCMalloc can execute NumCPUs. by Chris Kennelly · 9 months ago
  45. 700f8fa Skip sanitizers for limits_test by Wiktor Garbacz · 9 months ago
  46. 1475458 namespace_test: use lstat instead of stat, don't descent into procfs & sysfs by Wiktor Garbacz · 9 months ago
  47. b47a5ea Add TCMalloc related files to test policy by Wiktor Garbacz · 9 months ago
  48. 4289b64 Disallow clone3, unsafe clone and unshare flags by Wiktor Garbacz · 9 months ago
  49. 77f62cc Remove unused `NetworkProxyClient::ConnectHandler` by Wiktor Garbacz · 9 months ago
  50. f614862 Remove deprecated VecStringToCharPtrArr by Wiktor Garbacz · 10 months ago
  51. b350a41 Gather more coverage data by Wiktor Garbacz · 10 months ago
  52. f6ec787 PtraceMonitor: Add a hard deadline for waiting for kill to take effect by Wiktor Garbacz · 10 months ago
  53. 98d7f91 Run more tests with sanitizers and coverage by Wiktor Garbacz · 10 months ago
  54. 92aeadd PolicyBuilder: test error conditions for AddPolicyOnSyscalls by Wiktor Garbacz · 10 months ago
  55. 02d770a NetworkProxyTest: test more error conditions by Wiktor Garbacz · 10 months ago
  56. b088c01 Add missing Aarch64 syscall entries by Wiktor Garbacz · 10 months ago
  57. 5f96986 Better network proxy tests by Wiktor Garbacz · 10 months ago
  58. 3ea3158 Remove mutexes from Comms by Wiktor Garbacz · 10 months ago
  59. 197f03a Adjust code so that variable name is correct by Wiktor Garbacz · 10 months ago
  60. e23acfd Made slight optimizations in Sandbox2's comms. by Jaeden Quintana · 10 months ago
  61. 2c9ac02 Rework network_proxy related tests/examples by Wiktor Garbacz · 10 months ago
  62. a0eb8d4 Increase limits in ElfParser by Sandboxed API Team · 10 months ago
  63. dc25251 Enable sandboxed stack traces for coverage by Wiktor Garbacz · 10 months ago
  64. f715bd8 Run more tests with coverage enabled by Wiktor Garbacz · 10 months ago
  65. 47c868e Merge block bpf/ptrace tests by Wiktor Garbacz · 10 months ago
  66. 5802d5b Refactor Forkserver::LaunchChild by Wiktor Garbacz · 10 months ago
  67. 09a48ba Reduce CHECK-failures in unotify monitor by Wiktor Garbacz · 10 months ago
  68. 4a6b0d4 Always override forkservers comms_fd in sandboxee by Wiktor Garbacz · 10 months ago
  69. 0150026 Make PolicyBuilder helpers more self-contained by Wiktor Garbacz · 10 months ago
  70. 37f0099 Final round of IWYU fixes for Sandbox2 by Wiktor Garbacz · 10 months ago
  71. c04ef45 CMake: Re-add missing library deps due to bad merge by Christian Blichmann · 10 months ago
  72. 7de1c4d More IWYU annotations by Wiktor Garbacz · 10 months ago
  73. c175ac2 Fix missing dep for users of SANDBOX2_TRACE by Wiktor Garbacz · 10 months ago
  74. edde724 Internal change by Wiktor Garbacz · 10 months ago
  75. 8254d13 Reenable the stack_trace_test by Wiktor Garbacz · 10 months ago
  76. d5ff466 Support passing `stderrthreshold` to sandboxee by Christian Blichmann · 10 months ago
  77. 3adc232 Add missing dependencies bazel/BUILD by Wiktor Garbacz · 10 months ago
  78. 127176d Bulk IWYU and build_cleaner fixes by Wiktor Garbacz · 10 months ago
  79. 38e5be9 Temporarily disable a non-sandboxed crash stack_trace_test by Wiktor Garbacz · 10 months ago
  80. eaf8ef8 Sandboxed API: Env vars: Set `GOOGLE_STDERRTHRESHOLD` used by OSS Abseil by Christian Blichmann · 10 months ago
  81. 0036d9d Update Abseil by Wiktor Garbacz · 10 months ago
  82. 6986af5 IWYU fixes by Wiktor Garbacz · 10 months ago
  83. 696d0ee Add IWYU pragma by Wiktor Garbacz · 10 months ago
  84. 9dcc9db Replace StrError with PLOG by Wiktor Garbacz · 10 months ago
  85. 41003aa Automated rollback of commit 1e26cd50dc5d6ad3dfef47dbabdf669f812d9bf5. by Sandboxed API Team · 10 months ago
  86. c4660f8 Provide sealing flags if not defined in the headers by Wiktor Garbacz · 10 months ago
  87. e75be07 Automated rollback of commit 9c2174446004e4f712cb566ade05721be6653ed0. by Wiktor Garbacz · 10 months ago
  88. 8a6b689 Cleanup includes by Wiktor Garbacz · 10 months ago
  89. 632fdc6 Add missing includes by Wiktor Garbacz · 10 months ago
  90. 1e26cd5 Always override forkservers comms_fd in sandboxee by Wiktor Garbacz · 10 months ago
  91. 56d11ae Client::PrepareEnvironment simplify by supporting just a single preserved fd by Wiktor Garbacz · 10 months ago
  92. 1e9b686 Make `Comms` movable by Wiktor Garbacz · 10 months ago
  93. 08b81b5 Internal change by Wiktor Garbacz · 10 months ago
  94. bf9fe79 Introduce a SAPI_RAW_VLOG_IS_ON just for raw_logging by Wiktor Garbacz · 10 months ago
  95. ff23e87 Prefer regular logging to raw_logging by Wiktor Garbacz · 10 months ago
  96. b258535 Treat libunwind sandbox as a ~regular sandboxee by Wiktor Garbacz · 10 months ago
  97. 6a64659 Use default SAPI policy in the examples by Wiktor Garbacz · 10 months ago
  98. 77fbfa7 forkserver: use eventfd instead pipe for initial namespace creation by Wiktor Garbacz · 10 months ago
  99. 5d13550 Allow set_robust_list for TSAN by Wiktor Garbacz · 10 months ago
  100. 18c64ae Adjust sandboxed_api default policy by Wiktor Garbacz · 10 months ago