Google Git
Sign in
android / platform / external / minijail / 0f72ef4240eede66e73f380d5fd7e1e9104de6ce
commit0f72ef4240eede66e73f380d5fd7e1e9104de6ce[log] [tgz]
authorDylan Reid <dgreid@chromium.org>Tue Jun 06 15:42:49 2017 -0700
committerDylan Reid <dgreid@google.com>Thu Jun 29 12:46:46 2017 -0700
treecc351c6d924ed880274295055f49dd11995b34b0
parente61fd6681305084ac5bf97a8043882cd6d4370e2 [diff]
Add the ability to set rlimits on the jailed process

Currently Chrome OS relies on upstart to configure these limits but
that isn't available when using libminijail from session manager.  Add
it so runtime limits can be configured for Android and other containers.

BUG=none
TEST=updated security_Minijail0 and manually check /proc/xxx/limits of
jailed process.

Change-Id: I62ed63c89c9c5196b7d9873520b396c9524e5855
Signed-off-by: Dylan Reid <dgreid@chromium.org>
4 files changed
tree: cc351c6d924ed880274295055f49dd11995b34b0
  1. examples/
  2. linux-x86/
  3. test/
  4. tools/
  5. .clang-format
  6. .gitignore
  7. Android.mk
  8. AndroidTest.xml
  9. arch.h
  10. bpf.c
  11. bpf.h
  12. common.mk
  13. CPPLINT.cfg
  14. elfparse.c
  15. elfparse.h
  16. gen.mk
  17. gen_constants.sh
  18. gen_syscalls.sh
  19. get_googletest.sh
  20. HACKING
  21. libconstants.h
  22. libminijail-private.h
  23. libminijail.c
  24. libminijail.h
  25. libminijail.pc.in
  26. libminijail_unittest.cc
  27. libminijailpreload.c
  28. libsyscalls.h
  29. Makefile
  30. minijail0.1
  31. minijail0.5
  32. minijail0.c
  33. MODULE_LICENSE_BSD
  34. NOTICE
  35. OWNERS
  36. parse_seccomp_policy.cc
  37. platform2_preinstall.sh
  38. PRESUBMIT.cfg
  39. PREUPLOAD.cfg
  40. scoped_minijail.h
  41. signal_handler.c
  42. signal_handler.h
  43. syscall_filter.c
  44. syscall_filter.h
  45. syscall_filter_unittest.cc
  46. syscall_filter_unittest_macros.h
  47. syscall_wrapper.c
  48. syscall_wrapper.h
  49. system.c
  50. system.h
  51. test_harness.h
  52. util.c
  53. util.h