Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-05-13 | Merge release-20200422.0-296-g18cb3d2 (automated) | gVisor bot | |
2020-05-13 | Use VFS2 mount names | Fabricio Voznika | |
Updates #1487 PiperOrigin-RevId: 311356385 | |||
2020-05-13 | Merge release-20200422.0-295-ge4058c0 (automated) | gVisor bot | |
2020-05-13 | Replace test_runner.sh bash script with Go. | Ian Gudger | |
PiperOrigin-RevId: 311285868 | |||
2020-05-13 | Merge release-20200422.0-294-g305f786 (automated) | gVisor bot | |
2020-05-12 | Adjust a few log messages | Fabricio Voznika | |
PiperOrigin-RevId: 311234146 | |||
2020-05-12 | Merge release-20200422.0-293-g725afc6 (automated) | gVisor bot | |
2020-05-12 | Merge pull request #2678 from nybidari:iptables | gVisor bot | |
PiperOrigin-RevId: 311203776 | |||
2020-05-12 | Merge release-20200422.0-291-g7b691ab (automated) | gVisor bot | |
2020-05-12 | Don't allow rename across different gofer or tmpfs mounts. | Nicolas Lacasse | |
Fixes #2651. PiperOrigin-RevId: 311193661 | |||
2020-05-12 | Merge release-20200422.0-290-ga3f97a7 (automated) | gVisor bot | |
2020-05-12 | Merge pull request #2513 from amscanne:website-integrated | gVisor bot | |
PiperOrigin-RevId: 311184385 | |||
2020-05-12 | Merge release-20200422.0-74-g6a4466a (automated) | gVisor bot | |
2020-05-12 | Merge pull request #2671 from kevinGC:skip-output | gVisor bot | |
PiperOrigin-RevId: 311181084 | |||
2020-05-12 | Merge release-20200422.0-72-g8dd1d5b (automated) | gVisor bot | |
2020-05-12 | Don't call kernel.Task.Block() from netstack.SocketOperations.Write(). | Jamie Liu | |
kernel.Task.Block() requires that the caller is running on the task goroutine. netstack.SocketOperations.Write() uses kernel.TaskFromContext() to call kernel.Task.Block() even if it's not running on the task goroutine. Stop doing that. PiperOrigin-RevId: 311178335 | |||
2020-05-12 | iptables: support gid match for owner matching. | Nayana Bidari | |
- Added support for matching gid owner and invert flag for uid and gid. $ iptables -A OUTPUT -p tcp -m owner --gid-owner root -j ACCEPT $ iptables -A OUTPUT -p tcp -m owner ! --uid-owner root -j ACCEPT $ iptables -A OUTPUT -p tcp -m owner ! --gid-owner root -j DROP - Added tests for uid, gid and invert flags. | |||
2020-05-12 | Merge release-20200422.0-71-g06ded1c (automated) | gVisor bot | |
2020-05-12 | Merge pull request #2664 from lubinszARM:pr_sigfp | gVisor bot | |
PiperOrigin-RevId: 311153824 | |||
2020-05-12 | Merge release-20200422.0-69-g94251ae (automated) | gVisor bot | |
2020-05-11 | Internal change. | Jamie Liu | |
PiperOrigin-RevId: 311046755 | |||
2020-05-11 | iptables: check for truly unconditional rules | Kevin Krakauer | |
We weren't properly checking whether the inserted default rule was unconditional. | |||
2020-05-11 | Add fpsimd support in sigreturn on Arm64 | Bin Lu | |
Signed-off-by: Bin Lu <bin.lu@arm.com> | |||
2020-05-11 | Merge release-20200422.0-68-g15de8cc (automated) | gVisor bot | |
2020-05-11 | Add fsimpl/gofer.InternalFilesystemOptions.OpenSocketsByConnecting. | Jamie Liu | |
PiperOrigin-RevId: 311014995 | |||
2020-05-11 | Merge release-20200422.0-67-g633e1b8 (automated) | gVisor bot | |
2020-05-11 | Internal change. | gVisor bot | |
PiperOrigin-RevId: 311011004 | |||
2020-05-11 | Merge release-20200422.0-66-ge838e7a (automated) | gVisor bot | |
2020-05-11 | Automated rollback of changelist 310417191 | Bhasker Hariharan | |
PiperOrigin-RevId: 310963404 | |||
2020-05-11 | Merge release-20200422.0-65-gc5ab21b (automated) | gVisor bot | |
2020-05-11 | Internal change. | gVisor bot | |
PiperOrigin-RevId: 310949277 | |||
2020-05-11 | Merge release-20200422.0-64-g0cb9e1d (automated) | gVisor bot | |
2020-05-11 | Merge release-20200422.0-63-gaf2bc1c (automated) | gVisor bot | |
2020-05-11 | Fix view.ToVectorisedView(). | Bhasker Hariharan | |
view.ToVectorisedView() now just returns an empty vectorised view if the view is of zero length. Earlier it would return a VectorisedView of zero length but with 1 empty view. This has been a source of bugs as lower layers don't expect zero length views in VectorisedViews. VectorisedView.AppendView() now is a no-op if the view being appended is of zero length. Fixes #2658 PiperOrigin-RevId: 310942269 | |||
2020-05-11 | Internal change. | gVisor bot | |
PiperOrigin-RevId: 310941717 | |||
2020-05-11 | Merge release-20200422.0-62-gc52195d (automated) | gVisor bot | |
2020-05-10 | Stop avoiding preadv2 and pwritev2, and add them to the filters. | Nicolas Lacasse | |
Some code paths needed these syscalls anyways, so they should be included in the filters. Given that we depend on these syscalls in some cases, there's no real reason to avoid them any more. PiperOrigin-RevId: 310829126 | |||
2020-05-08 | Merge release-20200422.0-61-gcfd3066 (automated) | gVisor bot | |
2020-05-08 | iptables - filter packets using outgoing interface. | gVisor bot | |
Enables commands with -o (--out-interface) for iptables rules. $ iptables -A OUTPUT -o eth0 -j ACCEPT PiperOrigin-RevId: 310642286 | |||
2020-05-08 | Merge release-20200422.0-60-ge4d2d21 (automated) | gVisor bot | |
2020-05-08 | Add UDP send/recv packetimpact tests. | Bhasker Hariharan | |
Fixes #2654 PiperOrigin-RevId: 310642216 | |||
2020-05-08 | Merge release-20200422.0-59-g21b7139 (automated) | gVisor bot | |
2020-05-08 | Pass flags to fsimpl/host.inode.open(). | Jamie Liu | |
This has two effects: It makes flags passed to open("/proc/[pid]/fd/[hostfd]") effective, and it prevents imported pipes/sockets/character devices from being opened with O_NONBLOCK unconditionally (because the underlying host FD was set to non-blocking in ImportFD()). PiperOrigin-RevId: 310596062 | |||
2020-05-08 | Merge release-20200422.0-58-g5d7d5ed (automated) | gVisor bot | |
2020-05-08 | Send ACK to OTW SEQs/unacc ACKs in CLOSE_WAIT | Zeling Feng | |
This fixed the corresponding packetimpact test. PiperOrigin-RevId: 310593470 | |||
2020-05-08 | Merge release-20200422.0-57-gc59e7b8 (automated) | gVisor bot | |
2020-05-07 | Merge pull request #2637 from avagin:make-vs-bazel | gVisor bot | |
PiperOrigin-RevId: 310479788 | |||
2020-05-07 | make: exit with non-zero code if "bazel build" failed | Andrei Vagin | |
Without this fix, make exits with zero code when bazel build failed: $ make run TARGETS="--abra --kadabra" ERROR: Unrecognized option: --abra $ echo $? 0 Signed-off-by: Andrei Vagin <avagin@gmail.com> | |||
2020-05-07 | Merge release-20200422.0-55-g5536073 (automated) | gVisor bot | |
2020-05-07 | make: bazel docker container should clean itself up. | Adin Scannell | |
This change two does things: 1) Name the container based on the canonical directory path. 2) Allow the container to exit after bazel itself has exited. The first is necessary to support multiple working directories, while the second one allows these instances to clean up properly. PiperOrigin-RevId: 310460748 |