summaryrefslogtreecommitdiffhomepage
path: root/pkg/sentry/kernel
AgeCommit message (Collapse)Author
2019-07-30Merge b765eb45 (automated)gVisor bot
2019-07-30Merge 5fdb945a (automated)gVisor bot
2019-07-29Rate limit the unimplemented syscall event handler.Nicolas Lacasse
This introduces two new types of Emitters: 1. MultiEmitter, which will forward events to other registered Emitters, and 2. RateLimitedEmitter, which will forward events to a wrapped Emitter, subject to given rate limits. The methods in the eventchannel package itself act like a multiEmitter, but is not actually an Emitter. Now we have a DefaultEmitter, and the methods in eventchannel simply forward calls to the DefaultEmitter. The unimplemented syscall handler now uses a RateLimetedEmitter that wraps the DefaultEmitter. PiperOrigin-RevId: 260612770
2019-07-29Merge f0507e1d (automated)gVisor bot
2019-07-29Merge 8e8b6096 (automated)gVisor bot
2019-07-29Merge 09be87bb (automated)gVisor bot
2019-07-27Merge 4183b902 (automated)gVisor bot
2019-07-26Merge 27626926 (automated)gVisor bot
2019-07-26Merge b5012237 (automated)gVisor bot
2019-07-26Merge pull request #452 from zhangningdlut:chris_test_pidnsgVisor bot
PiperOrigin-RevId: 260220279
2019-07-25Merge 7052d21d (automated)gVisor bot
2019-07-25Merge 83767574 (automated)gVisor bot
2019-07-25Merge 417096f7 (automated)gVisor bot
2019-07-24Merge 2ed832ff (automated)gVisor bot
2019-07-24Use different pidns among different containerschris.zn
The different containers in a sandbox used only one pid namespace before. This results in that a container can see the processes in another container in the same sandbox. This patch use different pid namespace for different containers. Signed-off-by: chris.zn <chris.zn@antfin.com>
2019-07-24Merge 7e38d643 (automated)gVisor bot
2019-07-24Merge d7bb79b6 (automated)gVisor bot
2019-07-23Merge bd770895 (automated)gVisor bot
2019-07-23Merge 04cbb13c (automated)gVisor bot
2019-07-23Merge 57745994 (automated)gVisor bot
2019-07-23Merge 12c25656 (automated)gVisor bot
2019-07-22Merge d706922d (automated)gVisor bot
2019-07-22Merge a0a86bbb (automated)gVisor bot
2019-07-22Merge fdac770f (automated)gVisor bot
2019-07-19Merge 32e6be00 (automated)gVisor bot
2019-07-19Merge f544509c (automated)gVisor bot
2019-07-19Merge 0e040ba6 (automated)gVisor bot
2019-07-17Merge 6f7e2bb3 (automated)gVisor bot
2019-07-17Merge 84a59de5 (automated)gVisor bot
2019-07-17Merge 8e3e021a (automated)gVisor bot
2019-07-17Merge 609cd91e (automated)gVisor bot
2019-07-17Merge pull request #355 from zhuangel:mastergVisor bot
PiperOrigin-RevId: 258643966
2019-07-17Merge 542fbd01 (automated)gVisor bot
2019-07-17Fix race in FDTable.GetFDs().Bhasker Hariharan
PiperOrigin-RevId: 258635459
2019-07-17Merge 682fd2d6 (automated)gVisor bot
2019-07-17Merge ca829158 (automated)gVisor bot
2019-07-17Merge 78a2704b (automated)gVisor bot
2019-07-16Merge 89368456 (automated)gVisor bot
2019-07-16Merge 74dc663b (automated)gVisor bot
2019-07-16Merge cf4fc510 (automated)gVisor bot
2019-07-16Merge 6a8ff6da (automated)gVisor bot
2019-07-15Merge ab44d145 (automated)gVisor bot
2019-07-12Merge c8ae00eb (automated)gVisor bot
2019-07-12Merge 4ad67050 (automated)gVisor bot
2019-07-12Merge eff2c264 (automated)gVisor bot
2019-07-12Merge 69e0affa (automated)gVisor bot
2019-07-09build: add nogo for static validationAdin Scannell
PiperOrigin-RevId: 257297820
2019-07-03futex: compare keys for equality when doing a FUTEX_UNLOCK_PI.Neel Natu
PiperOrigin-RevId: 256453827
2019-07-03Merge pull request #493 from ahmetb:reticulating-splinesgVisor bot
PiperOrigin-RevId: 256319059
2019-07-02Remove map from fd_map, change to fd_table.Adin Scannell
This renames FDMap to FDTable and drops the kernel.FD type, which had an entire package to itself and didn't serve much use (it was freely cast between types, and served as more of an annoyance than providing any protection.) Based on BenchmarkFDLookupAndDecRef-12, we can expect 5-10 ns per lookup operation, and 10-15 ns per concurrent lookup operation of savings. This also fixes two tangential usage issues with the FDMap. Namely, non-atomic use of NewFDFrom and associated calls to Remove (that are both racy and fail to drop the reference on the underlying file.) PiperOrigin-RevId: 256285890