Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-03-16 | Merge release-20200219.0-181-g159a230 (automated) | gVisor bot | |
2020-03-16 | Merge pull request #1943 from kevinGC:ipt-filter-ip | gVisor bot | |
PiperOrigin-RevId: 301197007 | |||
2020-03-14 | Merge release-20200219.0-177-g5e413ca (automated) | gVisor bot | |
2020-03-14 | Plumb VFS2 imported fds into virtual filesystem. | Dean Deng | |
- When setting up the virtual filesystem, mount a host.filesystem to contain all files that need to be imported. - Make read/preadv syscalls to the host in cases where preadv2 may not be supported yet (likewise for writing). - Make save/restore functions in kernel/kernel.go return early if vfs2 is enabled. PiperOrigin-RevId: 300922353 | |||
2020-03-11 | Merge release-20200219.0-145-g2c2622b (automated) | gVisor bot | |
2020-03-11 | Merge pull request #1975 from nybidari:iptables | gVisor bot | |
PiperOrigin-RevId: 300362789 | |||
2020-03-11 | Merge release-20200219.0-136-g24e7005 (automated) | gVisor bot | |
2020-03-09 | Enable thread local storage support on arm64. | Haibo Xu | |
Linux use the task.thread.uw.tp_value field to store the TLS pointer on arm64 platform, and we use a similar way in gvisor to store it in the arch/State struct. Signed-off-by: Haibo Xu <haibo.xu@arm.com> Change-Id: Ie76b5c6d109bc27ccfd594008a96753806db7764 | |||
2020-02-28 | Merge release-20200219.0-71-gccecf29 (automated) | gVisor bot | |
2020-02-27 | Merge release-20200219.0-61-gaa9f8ab (automated) | gVisor bot | |
2020-02-26 | iptables: filter by IP address (and range) | Kevin Krakauer | |
Enables commands such as: $ iptables -A INPUT -d 127.0.0.1 -j ACCEPT $ iptables -t nat -A PREROUTING ! -d 127.0.0.1 -j REDIRECT Also adds a bunch of REDIRECT+destination tests. | |||
2020-02-25 | Merge branch 'master' into iptables | nybidari | |
2020-02-25 | Add nat table support for iptables. | Nayana Bidari | |
- commit the changes for the comments. | |||
2020-02-25 | Merge release-20200219.0-37-g471b15b (automated) | gVisor bot | |
2020-02-25 | Port most syscalls to VFS2. | Jamie Liu | |
pipe and pipe2 aren't ported, pending a slight rework of pipe FDs for VFS2. mount and umount2 aren't ported out of temporary laziness. access and faccessat need additional FSImpl methods to implement properly, but are stubbed to prevent googletest from CHECK-failing. Other syscalls require additional plumbing. Updates #1623 PiperOrigin-RevId: 297188448 | |||
2020-02-21 | Merge release-20200211.0-65-gb8f56c7 (automated) | gVisor bot | |
2020-02-21 | Implement tap/tun device in vfs. | Ting-Yu Wang | |
PiperOrigin-RevId: 296526279 | |||
2020-02-21 | Merge release-20200211.0-58-gf1b7275 (automated) | gVisor bot | |
2020-02-20 | Merge release-20200211.0-55-gd90d714 (automated) | gVisor bot | |
2020-02-20 | Merge release-20200211.0-52-g9bad873 (automated) | gVisor bot | |
2020-02-20 | Better strace logging for epoll syscalls. | gVisor bot | |
Example: epoll_ctl(0x3 anon_inode:[eventpoll], EPOLL_CTL_ADD, 0x6 anon_inode:[eventfd], 0x7efe2fd92a80 {events=EPOLLIN|EPOLLOUT data=0x10203040506070a}) = 0x0 (4.411µs) epoll_wait(0x3 anon_inode:[eventpoll], 0x7efe2fd92b50 {{events=EPOLLOUT data=0x102030405060708}{events=EPOLLOUT data=0x102030405060708}{events=EPOLLOUT data=0x102030405060708}}, 0x3, 0xffffffff) = 0x3 (29.891µs) PiperOrigin-RevId: 296258146 | |||
2020-02-19 | Merge release-20200211.0-46-g660cfdf (automated) | gVisor bot | |
2020-02-18 | Merge release-20200211.0-35-g737a3d0 (automated) | gVisor bot | |
2020-02-18 | Merge release-20200211.0-31-g7fdb609 (automated) | gVisor bot | |
2020-02-18 | Merge pull request #1850 from kevinGC:jump2 | gVisor bot | |
PiperOrigin-RevId: 295785052 | |||
2020-02-18 | Add nat table support for iptables. | Nayana Bidari | |
Add nat table support for Prerouting hook with Redirect option. Add tests to check redirect of ports. | |||
2020-02-15 | Merge release-20200211.0-27-g5cc0bbb (automated) | gVisor bot | |
2020-02-15 | Merge release-20200211.0-26-g3d32ad1 (automated) | gVisor bot | |
2020-02-15 | Merge release-20200211.0-25-ga5069f8 (automated) | gVisor bot | |
2020-02-14 | Remove linux.EpollEvent.Fd. | gVisor bot | |
glibc defines struct epoll_event in such a way that epoll_event.data.fd exists. However, the kernel's definition of struct epoll_event makes epoll_event.data an opaque uint64, so naming half of it "fd" just introduces confusion. Remove the Fd field, and make Data a [2]int32 to compensate. Also add required padding to linux.EpollEvent on ARM64. PiperOrigin-RevId: 295250424 | |||
2020-02-14 | Merge release-20200211.0-18-g3c26f5e (automated) | gVisor bot | |
2020-02-14 | Enable automated marshalling for struct stat. | gVisor bot | |
This requires fixing a few build issues for non-am64 platforms. PiperOrigin-RevId: 295196922 | |||
2020-02-14 | Merge release-20200211.0-16-gb2e8690 (automated) | gVisor bot | |
2020-02-14 | Fix various issues related to enabling go-marshal. | gVisor bot | |
- Add missing build tags to files in the abi package. - Add the marshal package as a sentry dependency, allowed by deps_test. - Fix an issue with our top-level go_library BUILD rule, which incorrectly shadows the variable containing the input set of source files. This caused the expansion for the go_marshal clause to silently omit input files. - Fix formatting when copying build tags to gomarshal-generated files. - Fix a bug with import statement collision detection in go-marshal. PiperOrigin-RevId: 295112284 | |||
2020-02-13 | We can now create and jump in iptables. For example: | Kevin Krakauer | |
$ iptables -N foochain $ iptables -A INPUT -j foochain | |||
2020-02-13 | Merge release-20200211.0-11-g69bf39e (automated) | gVisor bot | |
2020-02-13 | Internal change. | gVisor bot | |
PiperOrigin-RevId: 294952610 | |||
2020-02-11 | Merge release-20200127.0-130-g9be46e5 (automated) | gVisor bot | |
2020-02-11 | Merge release-20200127.0-127-g0dd9ee0 (automated) | gVisor bot | |
2020-02-10 | Merge pull request #1775 from kevinGC:tcp-matchers-submit | gVisor bot | |
PiperOrigin-RevId: 294340468 | |||
2020-02-07 | Address GH comments. | Kevin Krakauer | |
2020-02-06 | Merge release-20200127.0-85-g1b6a12a (automated) | gVisor bot | |
2020-02-05 | Merge release-20200127.0-79-gb29aeeb (automated) | gVisor bot | |
2020-02-04 | Merge pull request #1683 from kevinGC:ipt-udp-matchers | gVisor bot | |
PiperOrigin-RevId: 293243342 | |||
2020-02-04 | Merge release-20200127.0-65-g95ce8bb (automated) | gVisor bot | |
2020-01-31 | iptables: enable TCP matching with "-m tcp". | Kevin Krakauer | |
A couple other things that changed: - There's a proper extension registration system for matchers. Anyone adding another matcher can use tcp_matcher.go or udp_matcher.go as a template. - All logging and use of syserr.Error in the netfilter package happens at the highest possible level (public functions). Lower-level functions just return normal, descriptive golang errors. | |||
2020-01-29 | Merge branch 'master' into ipt-udp-matchers | Kevin Krakauer | |
2020-01-29 | Merge release-20200127.0-28-g8dcedc9 (automated) | gVisor bot | |
2020-01-29 | Add //pkg/sentry/devices/memdev. | Jamie Liu | |
PiperOrigin-RevId: 292165063 | |||
2020-01-28 | Merge release-20200115.0-121-g34fbd84 (automated) | gVisor bot | |