diff options
| author | David Gibson <david@gibson.dropbear.id.au> | 2022-10-14 15:25:31 +1100 |
|---|---|---|
| committer | Stefano Brivio <sbrivio@redhat.com> | 2022-10-15 02:10:36 +0200 |
| commit | 096e48669b56273d44a3242d7af4840b38335961 (patch) | |
| tree | f88f70e1843ebc5edc7c323a817bf86d1b3cd014 /isolation.h | |
| parent | 6909a8e3390913d656f55803fa6cf5d0b1d46812 (diff) | |
| download | passt-096e48669b56273d44a3242d7af4840b38335961.tar passt-096e48669b56273d44a3242d7af4840b38335961.tar.gz passt-096e48669b56273d44a3242d7af4840b38335961.tar.bz2 passt-096e48669b56273d44a3242d7af4840b38335961.tar.lz passt-096e48669b56273d44a3242d7af4840b38335961.tar.xz passt-096e48669b56273d44a3242d7af4840b38335961.tar.zst passt-096e48669b56273d44a3242d7af4840b38335961.zip | |
isolation: Clarify various self-isolation steps
We have a number of steps of self-isolation scattered across our code.
Improve function names and add comments to make it clearer what the self
isolation model is, what the steps do, and why they happen at the points
they happen.
Signed-off-by: David Gibson <david@gibson.dropbear.id.au>
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'isolation.h')
| -rw-r--r-- | isolation.h | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/isolation.h b/isolation.h index 2c73df7..70a38f9 100644 --- a/isolation.h +++ b/isolation.h @@ -7,9 +7,9 @@ #ifndef ISOLATION_H #define ISOLATION_H -void drop_caps(void); +void isolate_initial(void); void isolate_user(uid_t uid, gid_t gid, bool use_userns, const char *userns); -int sandbox(struct ctx *c); -void seccomp(const struct ctx *c); +int isolate_prefork(struct ctx *c); +void isolate_postfork(const struct ctx *c); #endif /* ISOLATION_H */ |