gvisor - Container Runtime Sandbox

Age	Commit message (Collapse)	Author
2020-09-11	Check that we have access to the trusted.* xattr namespace directly.	Nicolas Lacasse
	These operations require CAP_SYS_ADMIN in the root user namespace. There's no easy way to check that other than trying the operation and seeing what happens. PiperOrigin-RevId: 331242256
2020-09-08	[vfs] Capitalize x in the {Get/Set/Remove/List}xattr functions.	Ayush Ranjan
	PiperOrigin-RevId: 330554450
2020-08-26	tmpfs: Allow xattrs in the trusted namespace if creds has CAP_SYS_ADMIN.	Nicolas Lacasse
	This is needed to support the overlay opaque attribute. PiperOrigin-RevId: 328552985
2020-06-18	Remove various uses of 'whitelist'	Michael Pratt
	Updates #2972 PiperOrigin-RevId: 317113059
2020-04-10	Port extended attributes to VFS2.	Dean Deng
	As in VFS1, we only support the user.* namespace. Plumbing is added to tmpfs and goferfs. Note that because of the slightly different order of checks between VFS2 and Linux, one of the xattr tests needs to be relaxed slightly. Fixes #2363. PiperOrigin-RevId: 305985121
2020-02-07	Support listxattr and removexattr syscalls.	Dean Deng
	Note that these are only implemented for tmpfs, and other impls will still return EOPNOTSUPP. PiperOrigin-RevId: 293899385
2020-02-05	Disable get/set xattrs until list/remove exist too.	Nicolas Lacasse
	PiperOrigin-RevId: 293411655
2020-01-27	Update bug number for supporting extended attribute namespaces.	Dean Deng
	PiperOrigin-RevId: 291774815
2020-01-21	Add syscalls for lgetxattr, fgetxattr, lsetxattr, and fsetxattr.	Dean Deng
	Note that these simply will use the same logic as getxattr and setxattr, which is not yet implemented for most filesystems. PiperOrigin-RevId: 290800960
2020-01-16	Disable xattr tests.	Dean Deng
	These can remain disabled until we actually support extended attributes. The following modifications were also made: 1. Disable save/restore on tests that change file permissions. Restore will not work properly for these tests, since it will try to open the file with read-write after it has been read- or write-only. 2. Change user.abc to user.test. PiperOrigin-RevId: 290123941
2019-12-16	Implement checks for get/setxattr at the syscall layer.	Dean Deng
	Add checks for input arguments, file type, permissions, etc. that match the Linux implementation. A call to get/setxattr that passes all the checks will still currently return EOPNOTSUPP. Actual support will be added in following commits. Only allow user.* extended attributes for the time being. PiperOrigin-RevId: 285835159
2019-12-11	Add syscall tests for getxattr and setxattr.	Dean Deng
	Support for getxattr and setxattr are in subsequent commits. PiperOrigin-RevId: 285088817