summaryrefslogtreecommitdiffhomepage
path: root/pkg/sentry
AgeCommit message (Collapse)Author
2020-08-20Merge release-20200810.0-70-gd2e32395c (automated)gVisor bot
2020-08-20Fix tabs in lock-ordering doc.Nicolas Lacasse
PiperOrigin-RevId: 327654207
2020-08-20Merge release-20200810.0-69-gbe76c7ce6 (automated)gVisor bot
2020-08-20Merge release-20200810.0-68-g633570462 (automated)gVisor bot
2020-08-19Remove path walk from localFile.MknodFabricio Voznika
Replace mknod call with mknodat equivalent to protect against symlink attacks. Also added Mknod tests. Remove goferfs reliance on gofer to check for file existence before creating a synthetic entry. Updates #2923 PiperOrigin-RevId: 327544516
2020-08-20Merge release-20200810.0-67-g25babd635 (automated)gVisor bot
2020-08-19Merge release-20200810.0-66-gf8a948300 (automated)gVisor bot
2020-08-19Merge release-20200810.0-65-g182f66ee5 (automated)gVisor bot
2020-08-19ip6tables: move ipv4-specific logic into its own fileKevin Krakauer
A later change will introduce the equivalent IPv6 logic. #3549 PiperOrigin-RevId: 327499064
2020-08-19Merge release-20200810.0-64-g5cf330106 (automated)gVisor bot
2020-08-19Merge release-20200810.0-62-g41777e90e (automated)gVisor bot
2020-08-19Merge release-20200810.0-61-g333172229 (automated)gVisor bot
2020-08-19Merge release-20200810.0-60-g33c60b893 (automated)gVisor bot
2020-08-19Return appropriate errors when file locking is unsuccessful.Dean Deng
test_eintr now passes in the Python runtime tests. Updates #3515. PiperOrigin-RevId: 327441081
2020-08-19Merge release-20200810.0-59-g35dc7fe7e (automated)gVisor bot
2020-08-18[vfs] Allow offsets for special files other than regular files.Ayush Ranjan
Some character and block devices can be seekable. So allow their FD to maintain file offset. PiperOrigin-RevId: 327370684
2020-08-19Merge release-20200810.0-58-ge5f05d9bf (automated)gVisor bot
2020-08-18Get rid of kernfs.Inode.Destroy.Dean Deng
This interface method is unneeded. PiperOrigin-RevId: 327370325
2020-08-19Merge release-20200810.0-57-gf2822da54 (automated)gVisor bot
2020-08-18Move ERESTART* error definitions to syserror package.Dean Deng
This is needed to avoid circular dependencies between the vfs and kernel packages. PiperOrigin-RevId: 327355524
2020-08-19Merge release-20200810.0-56-g9da77d00f (automated)gVisor bot
2020-08-18Don't set atime if mount is readonlyFabricio Voznika
Updates #1035 PiperOrigin-RevId: 327351475
2020-08-19Merge release-20200810.0-55-gafe7303c3 (automated)gVisor bot
2020-08-18Add more information to panic when device ID don't matchFabricio Voznika
PiperOrigin-RevId: 327351357
2020-08-18Merge release-20200810.0-54-gf6d249048 (automated)gVisor bot
2020-08-18Merge release-20200810.0-53-g4184a7d5f (automated)gVisor bot
2020-08-18Merge release-20200810.0-52-g6405525b0 (automated)gVisor bot
2020-08-18Avoid holding locks when opening files in VFS2.Jamie Liu
Fixes #3243, #3521 PiperOrigin-RevId: 327308890
2020-08-18Merge release-20200810.0-51-g760c131da (automated)gVisor bot
2020-08-18Merge release-20200810.0-50-g4141dc0d2 (automated)gVisor bot
2020-08-18Merge release-20200810.0-49-gb3141b680 (automated)gVisor bot
2020-08-18Merge release-20200810.0-48-gb9d87ae7a (automated)gVisor bot
2020-08-18[vfs2] Implement /proc/sys/net/ipv4/tcp_rmem and /proc/sys/net/ipv4/tcp_wmem.Ayush Ranjan
Updates #1035 PiperOrigin-RevId: 327253907
2020-08-18Merge release-20200810.0-47-g673b6cc7f (automated)gVisor bot
2020-08-18Merge release-20200810.0-46-gda5c2ea6d (automated)gVisor bot
2020-08-17Merge release-20200810.0-45-g6d0c5803d (automated)gVisor bot
2020-08-17Add a skeleton for verity file systemgVisor bot
PiperOrigin-RevId: 327123477
2020-08-17Merge release-20200810.0-44-gd42d01b97 (automated)gVisor bot
2020-08-17Stop masking the IO error in handleIOError.Nicolas Lacasse
PiperOrigin-RevId: 327123331
2020-08-17Merge release-20200810.0-43-g1b938ba72 (automated)gVisor bot
2020-08-17Merge release-20200810.0-42-g988ab2705 (automated)gVisor bot
2020-08-17Merge release-20200810.0-41-ge3e1b3689 (automated)gVisor bot
2020-08-17[vfs] Do O_DIRECTORY check after resolving symlinks.Ayush Ranjan
Fixes python runtime test test_glob. Updates #3515 We were checking is the to-be-opened dentry is a dir or not before resolving symlinks. We should check that after resolving symlinks. This was preventing us from opening a symlink which pointed to a directory with O_DIRECTORY. Also added this check in tmpfs and removed a duplicate check. PiperOrigin-RevId: 327085895
2020-08-17Merge release-20200810.0-40-ge3c4bbd10 (automated)gVisor bot
2020-08-17Merge release-20200810.0-39-g3bd066d50 (automated)gVisor bot
2020-08-17Remove weak references from unix sockets.Dean Deng
The abstract socket namespace no longer holds any references on sockets. Instead, TryIncRef() is used when a socket is being retrieved in BoundEndpoint(). Abstract sockets are now responsible for removing themselves from the namespace they are in, when they are destroyed. Updates #1486. PiperOrigin-RevId: 327064173
2020-08-17Merge release-20200810.0-38-g58154194b (automated)gVisor bot
2020-08-17Merge release-20200810.0-37-g97263e505 (automated)gVisor bot
2020-08-17[vfs] Return EIO when opening /dev/tty.Ayush Ranjan
This is in compliance with VFS1. See pkg/sentry/fs/dev/tty.go in the struct ttyInodeOperations. Fixes the failure of python runtime test_ioctl. Updates #3515 PiperOrigin-RevId: 327042758
2020-08-15Merge release-20200810.0-36-g9a7b5830a (automated)gVisor bot