gvisor - Container Runtime Sandbox

Age	Commit message (Collapse)	Author
2020-05-29	Implement IN_EXCL_UNLINK inotify option in vfs2.	Dean Deng
	Limited to tmpfs. Inotify support in other filesystem implementations to follow. Updates #1479 PiperOrigin-RevId: 313828648
2020-05-29	Port inotify to vfs2, with support in tmpfs.	Dean Deng
	Support in other filesystem impls is still needed. Unlike in Linux and vfs1, we need to plumb inotify down to each filesystem implementation in order to keep track of links/inode structures properly. IN_EXCL_UNLINK still needs to be implemented, as well as a few inotify hooks that are not present in either vfs1 or vfs2. Those will be addressed in subsequent changes. Updates #1479. PiperOrigin-RevId: 313781995
2020-05-07	Allocate device numbers for VFS2 filesystems.	Jamie Liu
	Updates #1197, #1198, #1672 PiperOrigin-RevId: 310432006
2020-05-07	Remove outdated TODO for VFS2 AccessAt.	Dean Deng
	Fixes #1965. PiperOrigin-RevId: 310380433
2020-04-28	Fix Unix socket permissions.	Dean Deng
	Enforce write permission checks in BoundEndpointAt, which corresponds to the permission checks in Linux (net/unix/af_unix.c:unix_find_other). Also, create bound socket files with the correct permissions in VFS2. Fixes #2324. PiperOrigin-RevId: 308949084
2020-04-28	Support pipes and sockets in VFS2 gofer fs.	Dean Deng
	Named pipes and sockets can be represented in two ways in gofer fs: 1. As a file on the remote filesystem. In this case, all file operations are passed through 9p. 2. As a synthetic file that is internal to the sandbox. In this case, the dentry stores an endpoint or VFSPipe for sockets and pipes respectively, which replaces interactions with the remote fs through the gofer. In gofer.filesystem.MknodAt, we attempt to call mknod(2) through 9p, and if it fails, fall back to the synthetic version. Updates #1200. PiperOrigin-RevId: 308828161
2020-04-10	Port extended attributes to VFS2.	Dean Deng
	As in VFS1, we only support the user.* namespace. Plumbing is added to tmpfs and goferfs. Note that because of the slightly different order of checks between VFS2 and Linux, one of the xattr tests needs to be relaxed slightly. Fixes #2363. PiperOrigin-RevId: 305985121
2020-03-27	Add FilesystemType.Name method, and FilesystemType field to Filesystem struct.	Nicolas Lacasse
	Both have analogues in Linux: * struct file_system_type has a char name field. struct super_block keeps a pointer to the file_system_type. These fields are necessary to support the `filesystem type` field in /proc/[pid]/mountinfo. PiperOrigin-RevId: 303434063
2020-03-26	Add BoundEndpointAt filesystem operation.	Dean Deng
	BoundEndpointAt() is needed to support Unix sockets bound at a file path, corresponding to BoundEndpoint() in VFS1. Updates #1476. PiperOrigin-RevId: 303258251
2020-03-26	Combine file mode and isDir arguments	Fabricio Voznika
	Updates #1035 PiperOrigin-RevId: 303021328
2020-03-13	Implement access/faccessat for VFS2.	Dean Deng
	Note that the raw faccessat system call does not actually take a flags argument; according to faccessat(2), the glibc wrapper implements the flags by using fstatat(2). Remove the flag argument that we try to extract from vfs1, which would just be a garbage value. Updates #1965 Fixes #2101 PiperOrigin-RevId: 300796067
2020-01-28	Implement an anon_inode equivalent for VFS2.	Jamie Liu
	PiperOrigin-RevId: 291986033