| commit | 506cc35d2ad008953b5bb843c009c1c11b70e6a3 | [log] [tgz] |
|---|---|---|
| author | Daniel Norman <danielnorman@google.com> | Thu May 21 08:44:39 2020 -0700 |
| committer | Daniel Norman <danielnorman@google.com> | Thu May 21 08:49:17 2020 -0700 |
| tree | 4f5f58d13ff03555ac3297b1eb105c549fc2ee3a | |
| parent | 8405ea0518eaa211b45e749d15f25016fb286ace [diff] |
Adds support for a whitelist of allowed .git projects in BindOverlay. This allows using a whitelist of allowed projects in the sandbox, where any .git project not in this list is excluded from bind mounts. Test: Build a target in NSJail using an allowed projects list equal to that target's split manifest projects. Test: test.sh Bug: 156639642 Change-Id: I16ad22402e5e83982f157ef6e366140a3f31d65b