tree 2eacf0c11bd4f2fb4f4e5f15b63ac90496c8d05f
parent 86e10d3530c30df2c83e182f6e419de24f82863e
author Luis Hector Chavez <lhchavez@google.com> 1539359780 -0700
committer Luis Hector Chavez <lhchavez@google.com> 1539360208 -0700

minijail: Enter all namespaces before calling execve(2)

This change makes it so that all of the processes inside the namespace
(including the minijail-init process) are contained in the same set of
namespaces. This allows the use of nsenter(1) and setns(2) with the PID
that is written to a file using the -f flag to minijail0, or the
minijail_run_pid_*() family of functions.

Bug: None
Test: make tests
Change-Id: I3d546c7aeeaa3c875f41ce80b3504488020d2a5b