Age | Commit message (Collapse) | Author | |
---|---|---|---|
2020-02-05 | Merge release-20200127.0-79-gb29aeeb (automated) | gVisor bot | |
2020-02-04 | Merge pull request #1683 from kevinGC:ipt-udp-matchers | gVisor bot | |
PiperOrigin-RevId: 293243342 | |||
2020-02-04 | Merge release-20200127.0-65-g95ce8bb (automated) | gVisor bot | |
2020-01-29 | Merge release-20200127.0-28-g8dcedc9 (automated) | gVisor bot | |
2020-01-29 | Add //pkg/sentry/devices/memdev. | Jamie Liu | |
PiperOrigin-RevId: 292165063 | |||
2020-01-28 | Merge release-20200115.0-121-g34fbd84 (automated) | gVisor bot | |
2020-01-28 | Add VFS2 support for epoll. | Jamie Liu | |
PiperOrigin-RevId: 291997879 | |||
2020-01-28 | Merge release-20200115.0-120-gd99329e (automated) | gVisor bot | |
2020-01-28 | netlink: add support for RTM_F_LOOKUP_TABLE | Jianfeng Tan | |
Test command: $ ip route get 1.1.1.1 Fixes: #1099 Signed-off-by: Jianfeng Tan <henry.tjf@antfin.com> COPYBARA_INTEGRATE_REVIEW=https://github.com/google/gvisor/pull/1121 from tanjianfeng:fix-1099 e6919f3d4ede5aa51a48b3d2be0d7a4b482dd53d PiperOrigin-RevId: 291990716 | |||
2020-01-27 | Merge release-20200115.0-110-g0e2f1b7 (automated) | gVisor bot | |
2020-01-27 | Update package locations. | Adin Scannell | |
Because the abi will depend on the core types for marshalling (usermem, context, safemem, safecopy), these need to be flattened from the sentry directory. These packages contain no sentry-specific details. PiperOrigin-RevId: 291811289 | |||
2020-01-27 | Cleanup for GH review. | Kevin Krakauer | |
2020-01-27 | Standardize on tools directory. | Adin Scannell | |
PiperOrigin-RevId: 291745021 | |||
2020-01-24 | Merge branch 'master' into ipt-udp-matchers | Kevin Krakauer | |
2020-01-22 | Error marshalling the matcher. | Kevin Krakauer | |
The iptables binary is looking for libxt_.so when it should be looking for libxt_udp.so, so it's having an issue reading the data in xt_match_entry. I think it may be an alignment issue. Trying to fix this is leading to me fighting with the metadata struct, so I'm gonna go kill that. | |||
2020-01-22 | Merge release-20200115.0-62-g0693fb0 (automated) | gVisor bot | |
2020-01-21 | Merge pull request #1505 from xiaobo55x:fcntl_flags | gVisor bot | |
PiperOrigin-RevId: 290840484 | |||
2020-01-21 | Merge release-20200115.0-55-gad1968e (automated) | gVisor bot | |
2020-01-21 | Implement sysfs. | Rahat Mahmood | |
PiperOrigin-RevId: 290822487 | |||
2020-01-21 | Merge release-20200115.0-54-gdc99897 (automated) | gVisor bot | |
2020-01-21 | Removed TCP work (saved in ipt-tcp-match). | Kevin Krakauer | |
2020-01-21 | Add missing verb | Michael Pratt | |
PiperOrigin-RevId: 290821997 | |||
2020-01-21 | Add UDP matchers. | Kevin Krakauer | |
2020-01-16 | Merge release-20200115.0-2-gd6fb1ec (automated) | gVisor bot | |
2020-01-15 | Add timestamps to VFS2 tmpfs, and implement some of SetStat. | Nicolas Lacasse | |
PiperOrigin-RevId: 289962040 | |||
2020-01-13 | Merge release-20191213.0-111-gb30cfb1 (automated) | gVisor bot | |
2020-01-08 | More GH comments. | Kevin Krakauer | |
2020-01-08 | Addressed GH comments | Kevin Krakauer | |
2020-01-08 | Comment cleanup. | Kevin Krakauer | |
2020-01-08 | Write simple ACCEPT rules to the filter table. | Kevin Krakauer | |
This gets us closer to passing the iptables tests and opens up iptables so it can be worked on by multiple people. A few restrictions are enforced for security (i.e. we don't want to let users write a bunch of iptables rules and then just not enforce them): - Only the filter table is writable. - Only ACCEPT rules with no matching criteria can be added. | |||
2020-01-06 | Merge release-20191213.0-61-g354a15a (automated) | gVisor bot | |
2020-01-06 | Implement rseq(2) | Michael Pratt | |
PiperOrigin-RevId: 288342928 | |||
2020-01-06 | Make some of the fcntl flags arch specific.. | Haibo Xu | |
Some of the flags in the file system related system call are architecture specific(O_NOFOLLOW/O_DIRECT..). Ref to the fcntl.h file in the Linux src codes. Signed-off-by: Haibo Xu <haibo.xu@arm.com> Change-Id: I354d988073bfd0c9ff5371d4e0be9da2b8fd019f | |||
2019-12-16 | Merge release-20191210.0-31-ge6f4124 (automated) | gVisor bot | |
2019-12-16 | Implement checks for get/setxattr at the syscall layer. | Dean Deng | |
Add checks for input arguments, file type, permissions, etc. that match the Linux implementation. A call to get/setxattr that passes all the checks will still currently return EOPNOTSUPP. Actual support will be added in following commits. Only allow user.* extended attributes for the time being. PiperOrigin-RevId: 285835159 | |||
2019-12-12 | Merge release-20191210.0-26-g007707a (automated) | gVisor bot | |
2019-12-12 | Implement kernfs. | Rahat Mahmood | |
PiperOrigin-RevId: 285231002 | |||
2019-12-11 | Merge release-20191129.0-42-g46651a7 (automated) | gVisor bot | |
2019-12-10 | Add most VFS methods for syscalls. | Jamie Liu | |
PiperOrigin-RevId: 284892289 | |||
2019-12-06 | Merge release-20191129.0-7-g13f0f60 (automated) | gVisor bot | |
2019-12-05 | Implement F_GETOWN_EX and F_SETOWN_EX. | Ian Gudger | |
Some versions of glibc will convert F_GETOWN fcntl(2) calls into F_GETOWN_EX in some cases. PiperOrigin-RevId: 284089373 | |||
2019-11-28 | Merge release-20191114.0-41-g684f757 (automated) | gVisor bot | |
2019-11-27 | Add support for receiving TOS and TCLASS control messages in hostinet. | Dean Deng | |
This involves allowing getsockopt/setsockopt for the corresponding socket options, as well as allowing hostinet to process control messages received from the actual recvmsg syscall. PiperOrigin-RevId: 282851425 | |||
2019-10-25 | Merge release-20190806.1-324-g9a72674 (automated) | gVisor bot | |
2019-10-24 | slight changes to pkg/abi | Bin Lu | |
In glibc, some structures are defined differently on different platforms. Such as: C.struct_stat Signed-off-by: Bin Lu <bin.lu@arm.com> | |||
2019-10-23 | Merge release-20190806.1-315-g6d4d956 (automated) | gVisor bot | |
2019-10-23 | Merge pull request #641 from tanjianfeng:master | gVisor bot | |
PiperOrigin-RevId: 276380008 | |||
2019-10-21 | Merge release-20190806.1-295-g12235d5 (automated) | gVisor bot | |
2019-10-21 | AF_PACKET support for netstack (aka epsocket). | Kevin Krakauer | |
Like (AF_INET, SOCK_RAW) sockets, AF_PACKET sockets require CAP_NET_RAW. With runsc, you'll need to pass `--net-raw=true` to enable them. Binding isn't supported yet. PiperOrigin-RevId: 275909366 | |||
2019-10-16 | Reorder BUILD license and load functions in gvisor. | Kevin Krakauer | |
PiperOrigin-RevId: 275139066 |