Gitiles
Code Review
Sign In
android-review.linaro.org
/
platform
/
external
/
sandboxed-api
/
bbaabc5ab384b910d474223313e866d75b3bfcec
bbaabc5
Merge remote-tracking branch 'aosp/upstream-main' into 'aosp/main'
by A. Cody Schuffelen
· 4 months ago
f708270
Add `DefaultAction(TraceAllSyscalls)` variant to `PolicyBuilder`
by A. Cody Schuffelen
· 5 months ago
044ba1c
Return ENOSYS instead of hard denying clone3
by Wiktor Garbacz
· 5 months ago
29a3b8c
Add AllowAccess to SAPI's default policy
by Wiktor Garbacz
· 5 months ago
b9c84a1
Allow restartable sequences access to poll.
by Chris Kennelly
· 5 months ago
0e98cce
Permit TCMalloc to use MAP_FIXED_NOREPLACE.
by Chris Kennelly
· 5 months ago
f2840b3
NullPtr: Change SAPI to accept regular `nullptr` for sandboxed API calls.
by Oliver Kunz
· 5 months ago
fa53603
Use `absl::string_view` consistently
by Wiktor Garbacz
· 5 months ago
25cfb5e
Adding missing syscalls to the syscall tables.
by Sandboxed API Team
· 5 months ago
824d894
Make sandbox2::SyscallTable::GetEntry public and add new helper GetEntries.
by Sandboxed API Team
· 5 months ago
28b4567
Allow `sched_getaffinity` in `AllowLlvmSanitizers`
by Wiktor Garbacz
· 5 months ago
fbfc2b9
Handle `prlimit64` in `Allow*RLimit`
by Wiktor Garbacz
· 5 months ago
9a06f3a
Change the order of including system include paths.
by Sandboxed API Team
· 5 months ago
a56660f
Allow restartable sequences' mmaps to name their VMAs.
by Chris Kennelly
· 5 months ago
3407ceb
Merge "ANDROID: Statically link libc++ in sandbox2" into main
by Treehugger Robot
· 6 months ago
48c5dee
ANDROID: Statically link libc++ in sandbox2
by A. Cody Schuffelen
· 6 months ago
fc610b7
Fix UB caused by uninitialized value.
by Sandboxed API Team
· 6 months ago
1339d0b
Remove unneeded include
by Wiktor Garbacz
· 6 months ago
52babc1
logserver: Support non-UTF8 log messages
by Wiktor Garbacz
· 6 months ago
abba1f7
Stop using bionic headers to build sandbox2 in glibc
by A. Cody Schuffelen
· 6 months ago
e5370e9
Minor cleanups, no functional change.
by Sandboxed API Team
· 6 months ago
36e4b80
Introduce and prefer `AllowMmapWithoutExec`
by Wiktor Garbacz
· 6 months ago
1255f57
Provide an option to use the unotify monitor instead of the ptrace monitor.
by Oliver Kunz
· 6 months ago
0a992b6
Add special handling for global forkserver
by Wiktor Garbacz
· 6 months ago
d95df64
Add a test for custom forkserver
by Wiktor Garbacz
· 6 months ago
39e4954
The current implementation of `Sandbox::Terminate` results in timeout's being reported to coroner in cases where a Restart or Terminate with graceful exit is requested.
by Oliver Kunz
· 6 months ago
19d8f47
Add clone3 to syscall defs
by Wiktor Garbacz
· 6 months ago
675a945
Add more files to the sandboxed_api_sandbox2 target am: 549ae36505
by A. Cody Schuffelen
· 7 months ago
692625a
Start a sandbox2 target, embedding the forkserver executable. am: 812828e09e
by A. Cody Schuffelen
· 7 months ago
4d34bdb
Integrate LLVM at llvm/llvm-project@3287ae8f6520
by Dmitri Gribenko
· 7 months ago
5ed720e
SAPI_RAW_CHECK expects NUL-terminated strings
by Wiktor Garbacz
· 7 months ago
549ae36
Add more files to the sandboxed_api_sandbox2 target
by A. Cody Schuffelen
· 7 months ago
812828e
Start a sandbox2 target, embedding the forkserver executable.
by A. Cody Schuffelen
· 7 months ago
ce95449
Build the forkserver in sandboxed-api am: d7972be9d3
by A. Cody Schuffelen
· 7 months ago
a0ba1c5
Enable the ability to change the sandboxee's malloc implementation. The default is set to "@bazel_tools//tools/cpp:malloc", which is also the default for Bazel's cc_binary [1].
by Oliver Kunz
· 7 months ago
d7972be
Build the forkserver in sandboxed-api
by A. Cody Schuffelen
· 7 months ago
9a171c7
Fix quoting for fedora build action
by Wiktor Garbacz
· 7 months ago
dc8bcc9
Update github actions OS and dependencies versions
by Wiktor Garbacz
· 7 months ago
15fb5b9
Allow sigaltstack
by Wiktor Garbacz
· 7 months ago
bc3c0ec
Internal change
by Wiktor Garbacz
· 7 months ago
1bad376
Block `sigaltstack` with `ENOSYS` by default
by Wiktor Garbacz
· 7 months ago
4d5295a
Start a build target for building sandbox2 am: a1fed775e7
by A. Cody Schuffelen
· 7 months ago
a1fed77
Start a build target for building sandbox2
by A. Cody Schuffelen
· 8 months ago
a9e22ba
Remove .gitmodules am: 6457e527fc
by A. Cody Schuffelen
· 8 months ago
424f21b
Record BSD 2 clause license in oss-internship-2020/openjpeg/examples/convert_h.patch am: 1c306e3321
by A. Cody Schuffelen
· 8 months ago
879e332
Add Android.bp file to restrict visibility am: 3e69361cf8
by A. Cody Schuffelen
· 8 months ago
b7191cd
Add metadata files am: 797a093f6b
by A. Cody Schuffelen
· 8 months ago
e3dc5b1
Merge remote-tracking branch 'aosp/upstream-main' am: 220ae3e4cb
by A. Cody Schuffelen
· 8 months ago
6f90a6e
don't drop CAP_SYS_PTRACE as it is apparently needed by sandbox
by Sandboxed API Team
· 8 months ago
6457e52
Remove .gitmodules
by A. Cody Schuffelen
· 11 months ago
1c306e3
Record BSD 2 clause license in oss-internship-2020/openjpeg/examples/convert_h.patch
by A. Cody Schuffelen
· 11 months ago
3e69361
Add Android.bp file to restrict visibility
by A. Cody Schuffelen
· 11 months ago
797a093
Add metadata files
by A. Cody Schuffelen
· 11 months ago
220ae3e
Merge remote-tracking branch 'aosp/upstream-main'
by A. Cody Schuffelen
· 8 months ago
79ab44c
drop almost all capabilities during sandbox creation
by Sandboxed API Team
· 8 months ago
4630346
Fix unaligned load
by Wiktor Garbacz
· 8 months ago
0940a9e
Export `config.h` from `syscall.h` for `sapi::cpu::Architecture`
by Wiktor Garbacz
· 9 months ago
37a7432
Remove deprecated comms functions
by Wiktor Garbacz
· 9 months ago
fadfa79
Add missing return
by Wiktor Garbacz
· 9 months ago
ee7b76f
Automated rollback of commit 4ae281b6a25334da65c441885849c61a12ecd2b3.
by Sandboxed API Team
· 9 months ago
4ae281b
Remove deprecated comms functions
by Wiktor Garbacz
· 9 months ago
9a985f9
Replace use of deprecated `sandbox2::Comms` functions
by Wiktor Garbacz
· 9 months ago
227daf4
Do 1 level of recursion on libunwind crashes
by Wiktor Garbacz
· 9 months ago
1cf45be
Refactor Comms to split out listening/connecting part
by Wiktor Garbacz
· 9 months ago
d26262d
Remove stale comment
by Wiktor Garbacz
· 9 months ago
37b3a51
Use empty instead of length
by Sandboxed API Team
· 9 months ago
f5830c9
Ensure that TCMalloc can execute NumCPUs.
by Chris Kennelly
· 9 months ago
700f8fa
Skip sanitizers for limits_test
by Wiktor Garbacz
· 9 months ago
1475458
namespace_test: use lstat instead of stat, don't descent into procfs & sysfs
by Wiktor Garbacz
· 9 months ago
b47a5ea
Add TCMalloc related files to test policy
by Wiktor Garbacz
· 9 months ago
4289b64
Disallow clone3, unsafe clone and unshare flags
by Wiktor Garbacz
· 9 months ago
77f62cc
Remove unused `NetworkProxyClient::ConnectHandler`
by Wiktor Garbacz
· 9 months ago
f614862
Remove deprecated VecStringToCharPtrArr
by Wiktor Garbacz
· 10 months ago
b350a41
Gather more coverage data
by Wiktor Garbacz
· 10 months ago
f6ec787
PtraceMonitor: Add a hard deadline for waiting for kill to take effect
by Wiktor Garbacz
· 10 months ago
98d7f91
Run more tests with sanitizers and coverage
by Wiktor Garbacz
· 10 months ago
92aeadd
PolicyBuilder: test error conditions for AddPolicyOnSyscalls
by Wiktor Garbacz
· 10 months ago
02d770a
NetworkProxyTest: test more error conditions
by Wiktor Garbacz
· 10 months ago
b088c01
Add missing Aarch64 syscall entries
by Wiktor Garbacz
· 10 months ago
5f96986
Better network proxy tests
by Wiktor Garbacz
· 10 months ago
3ea3158
Remove mutexes from Comms
by Wiktor Garbacz
· 10 months ago
197f03a
Adjust code so that variable name is correct
by Wiktor Garbacz
· 10 months ago
e23acfd
Made slight optimizations in Sandbox2's comms.
by Jaeden Quintana
· 10 months ago
2c9ac02
Rework network_proxy related tests/examples
by Wiktor Garbacz
· 10 months ago
a0eb8d4
Increase limits in ElfParser
by Sandboxed API Team
· 10 months ago
dc25251
Enable sandboxed stack traces for coverage
by Wiktor Garbacz
· 10 months ago
f715bd8
Run more tests with coverage enabled
by Wiktor Garbacz
· 10 months ago
47c868e
Merge block bpf/ptrace tests
by Wiktor Garbacz
· 10 months ago
5802d5b
Refactor Forkserver::LaunchChild
by Wiktor Garbacz
· 10 months ago
09a48ba
Reduce CHECK-failures in unotify monitor
by Wiktor Garbacz
· 10 months ago
4a6b0d4
Always override forkservers comms_fd in sandboxee
by Wiktor Garbacz
· 10 months ago
0150026
Make PolicyBuilder helpers more self-contained
by Wiktor Garbacz
· 10 months ago
37f0099
Final round of IWYU fixes for Sandbox2
by Wiktor Garbacz
· 10 months ago
c04ef45
CMake: Re-add missing library deps due to bad merge
by Christian Blichmann
· 10 months ago
7de1c4d
More IWYU annotations
by Wiktor Garbacz
· 10 months ago
c175ac2
Fix missing dep for users of SANDBOX2_TRACE
by Wiktor Garbacz
· 10 months ago
edde724
Internal change
by Wiktor Garbacz
· 10 months ago
8254d13
Reenable the stack_trace_test
by Wiktor Garbacz
· 10 months ago
d5ff466
Support passing `stderrthreshold` to sandboxee
by Christian Blichmann
· 10 months ago
3adc232
Add missing dependencies bazel/BUILD
by Wiktor Garbacz
· 10 months ago
Next »