Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-02-13 | Merge release-20200211.0-11-g69bf39e (automated) | gVisor bot | |
2020-02-13 | Internal change. | gVisor bot | |
PiperOrigin-RevId: 294952610 | |||
2020-02-11 | Merge release-20200127.0-130-g9be46e5 (automated) | gVisor bot | |
2020-02-11 | Merge release-20200127.0-127-g0dd9ee0 (automated) | gVisor bot | |
2020-02-10 | Merge pull request #1775 from kevinGC:tcp-matchers-submit | gVisor bot | |
PiperOrigin-RevId: 294340468 | |||
2020-02-07 | Address GH comments. | Kevin Krakauer | |
2020-02-06 | Merge release-20200127.0-85-g1b6a12a (automated) | gVisor bot | |
2020-02-05 | Merge release-20200127.0-79-gb29aeeb (automated) | gVisor bot | |
2020-02-04 | Merge pull request #1683 from kevinGC:ipt-udp-matchers | gVisor bot | |
PiperOrigin-RevId: 293243342 | |||
2020-02-04 | Merge release-20200127.0-65-g95ce8bb (automated) | gVisor bot | |
2020-01-31 | iptables: enable TCP matching with "-m tcp". | Kevin Krakauer | |
A couple other things that changed: - There's a proper extension registration system for matchers. Anyone adding another matcher can use tcp_matcher.go or udp_matcher.go as a template. - All logging and use of syserr.Error in the netfilter package happens at the highest possible level (public functions). Lower-level functions just return normal, descriptive golang errors. | |||
2020-01-29 | Merge branch 'master' into ipt-udp-matchers | Kevin Krakauer | |
2020-01-29 | Merge release-20200127.0-28-g8dcedc9 (automated) | gVisor bot | |
2020-01-29 | Add //pkg/sentry/devices/memdev. | Jamie Liu | |
PiperOrigin-RevId: 292165063 | |||
2020-01-28 | Merge release-20200115.0-121-g34fbd84 (automated) | gVisor bot | |
2020-01-28 | Add VFS2 support for epoll. | Jamie Liu | |
PiperOrigin-RevId: 291997879 | |||
2020-01-28 | Merge release-20200115.0-120-gd99329e (automated) | gVisor bot | |
2020-01-28 | netlink: add support for RTM_F_LOOKUP_TABLE | Jianfeng Tan | |
Test command: $ ip route get 1.1.1.1 Fixes: #1099 Signed-off-by: Jianfeng Tan <henry.tjf@antfin.com> COPYBARA_INTEGRATE_REVIEW=https://github.com/google/gvisor/pull/1121 from tanjianfeng:fix-1099 e6919f3d4ede5aa51a48b3d2be0d7a4b482dd53d PiperOrigin-RevId: 291990716 | |||
2020-01-27 | Cleanup for GH review. | Kevin Krakauer | |
2020-01-27 | Standardize on tools directory. | Adin Scannell | |
PiperOrigin-RevId: 291745021 | |||
2020-01-24 | Merge branch 'master' into ipt-udp-matchers | Kevin Krakauer | |
2020-01-22 | Error marshalling the matcher. | Kevin Krakauer | |
The iptables binary is looking for libxt_.so when it should be looking for libxt_udp.so, so it's having an issue reading the data in xt_match_entry. I think it may be an alignment issue. Trying to fix this is leading to me fighting with the metadata struct, so I'm gonna go kill that. | |||
2020-01-22 | Merge release-20200115.0-62-g0693fb0 (automated) | gVisor bot | |
2020-01-21 | Merge pull request #1505 from xiaobo55x:fcntl_flags | gVisor bot | |
PiperOrigin-RevId: 290840484 | |||
2020-01-21 | Merge release-20200115.0-55-gad1968e (automated) | gVisor bot | |
2020-01-21 | Implement sysfs. | Rahat Mahmood | |
PiperOrigin-RevId: 290822487 | |||
2020-01-21 | Merge release-20200115.0-54-gdc99897 (automated) | gVisor bot | |
2020-01-21 | Removed TCP work (saved in ipt-tcp-match). | Kevin Krakauer | |
2020-01-21 | Add missing verb | Michael Pratt | |
PiperOrigin-RevId: 290821997 | |||
2020-01-21 | Add UDP matchers. | Kevin Krakauer | |
2020-01-16 | Merge release-20200115.0-2-gd6fb1ec (automated) | gVisor bot | |
2020-01-15 | Add timestamps to VFS2 tmpfs, and implement some of SetStat. | Nicolas Lacasse | |
PiperOrigin-RevId: 289962040 | |||
2020-01-13 | Merge release-20191213.0-111-gb30cfb1 (automated) | gVisor bot | |
2020-01-08 | More GH comments. | Kevin Krakauer | |
2020-01-08 | Addressed GH comments | Kevin Krakauer | |
2020-01-08 | Comment cleanup. | Kevin Krakauer | |
2020-01-08 | Write simple ACCEPT rules to the filter table. | Kevin Krakauer | |
This gets us closer to passing the iptables tests and opens up iptables so it can be worked on by multiple people. A few restrictions are enforced for security (i.e. we don't want to let users write a bunch of iptables rules and then just not enforce them): - Only the filter table is writable. - Only ACCEPT rules with no matching criteria can be added. | |||
2020-01-06 | Merge release-20191213.0-61-g354a15a (automated) | gVisor bot | |
2020-01-06 | Implement rseq(2) | Michael Pratt | |
PiperOrigin-RevId: 288342928 | |||
2020-01-06 | Make some of the fcntl flags arch specific.. | Haibo Xu | |
Some of the flags in the file system related system call are architecture specific(O_NOFOLLOW/O_DIRECT..). Ref to the fcntl.h file in the Linux src codes. Signed-off-by: Haibo Xu <haibo.xu@arm.com> Change-Id: I354d988073bfd0c9ff5371d4e0be9da2b8fd019f | |||
2019-12-16 | Merge release-20191210.0-31-ge6f4124 (automated) | gVisor bot | |
2019-12-16 | Implement checks for get/setxattr at the syscall layer. | Dean Deng | |
Add checks for input arguments, file type, permissions, etc. that match the Linux implementation. A call to get/setxattr that passes all the checks will still currently return EOPNOTSUPP. Actual support will be added in following commits. Only allow user.* extended attributes for the time being. PiperOrigin-RevId: 285835159 | |||
2019-12-12 | Merge release-20191210.0-26-g007707a (automated) | gVisor bot | |
2019-12-12 | Implement kernfs. | Rahat Mahmood | |
PiperOrigin-RevId: 285231002 | |||
2019-12-11 | Merge release-20191129.0-42-g46651a7 (automated) | gVisor bot | |
2019-12-10 | Add most VFS methods for syscalls. | Jamie Liu | |
PiperOrigin-RevId: 284892289 | |||
2019-12-06 | Merge release-20191129.0-7-g13f0f60 (automated) | gVisor bot | |
2019-12-05 | Implement F_GETOWN_EX and F_SETOWN_EX. | Ian Gudger | |
Some versions of glibc will convert F_GETOWN fcntl(2) calls into F_GETOWN_EX in some cases. PiperOrigin-RevId: 284089373 | |||
2019-11-28 | Merge release-20191114.0-41-g684f757 (automated) | gVisor bot | |
2019-11-27 | Add support for receiving TOS and TCLASS control messages in hostinet. | Dean Deng | |
This involves allowing getsockopt/setsockopt for the corresponding socket options, as well as allowing hostinet to process control messages received from the actual recvmsg syscall. PiperOrigin-RevId: 282851425 |