aboutgitcodebugslistschat
path: root/pasta.c
Commit message (Expand)AuthorAgeFilesLines
* convert all remaining err() followed by exit() to die()Laine Stump2023-02-161-13/+7
* pasta: propagate exit code from child commandPaul Holzinger2023-02-121-2/+10
* pasta: correctly exit when execvp() failsPaul Holzinger2023-02-121-1/+1
* pasta: Wait for tap to be set up before spawning commandStefano Brivio2023-02-121-1/+13
* util, pasta: Add do_clone() wrapper around __clone2() and clone()Stefano Brivio2022-11-161-5/+5
* Minor improvements to IPv4 netmask handlingDavid Gibson2022-11-041-5/+2
* Rename pasta_setup_ns() to pasta_spawn_cmd()David Gibson2022-10-151-9/+9
* isolation: Only configure UID/GID mappings in userns when spawning shellDavid Gibson2022-10-151-1/+14
* Replace FWRITE with a functionDavid Gibson2022-10-151-2/+2
* Remove unhelpful drop_caps() call in pasta_start_ns()David Gibson2022-10-151-2/+0
* pasta_start_ns() always ends in parent contextDavid Gibson2022-10-151-4/+1
* pasta: More general way of starting spawned shell as a login shellDavid Gibson2022-10-151-12/+20
* Move logging functions to a new file, log.cStefano Brivio2022-10-141-0/+1
* clang-tidy: Fix spurious null pointer warning in pasta_start_ns()David Gibson2022-09-291-1/+4
* Handle userns isolation and dropping root at the same timeDavid Gibson2022-09-131-49/+7
* Correctly handle --netns-only in pasta_start_ns()David Gibson2022-09-131-2/+2
* Clean up and rename conf_ns_open()David Gibson2022-09-131-0/+66
* Move self-isolation code into a separate fileDavid Gibson2022-09-131-0/+1
* Allow pasta to take a command to executeDavid Gibson2022-08-301-10/+23
* Don't unnecessarily avoid CLOEXEC flags2022_08_24.60ffc5bDavid Gibson2022-08-241-1/+1
* Make substructures for IPv4 and IPv6 specific context informationDavid Gibson2022-07-301-5/+5
* Separate IPv4 and IPv6 configurationDavid Gibson2022-07-301-2/+2
* treewide: Argument cannot be negative, CWE-687Stefano Brivio2022-04-071-17/+8
* treewide: Fix android-cloexec-* clang-tidy warnings, re-enable checksStefano Brivio2022-03-291-7/+9
* seccomp: Adjust list of allowed syscalls for armv6l, armv7lStefano Brivio2022-02-261-1/+2
* pasta: By default, quit if filesystem-bound net namespace goes awayStefano Brivio2022-02-211-0/+52
* passt, pasta: Namespace-based sandboxing, defer seccomp policy applicationStefano Brivio2022-02-211-106/+59
* seccomp: Add a number of alternate and per-arch syscallsStefano Brivio2022-01-261-1/+2
* pasta: Check for zero d_reclen returned by getdents64() syscallStefano Brivio2022-01-261-1/+1
* conf, pasta: Explicitly pass CLONE_{NEWUSER,NEWNET} to setns()Stefano Brivio2022-01-261-2/+4
* passt: Drop <linux/ipv6.h> include, carry own ipv6hdr and opt_hdr definitionsStefano Brivio2022-01-261-2/+0
* passt: Add cppcheck target, test, and address resulting warningsStefano Brivio2021-10-211-4/+7
* passt: Fix build with gcc 7, use std=c99, enable some more Clang checkersStefano Brivio2021-10-211-1/+2
* passt: Add clang-tidy Makefile target and test, take care of warningsStefano Brivio2021-10-201-1/+1
* passt: Address gcc 11 warningsStefano Brivio2021-10-201-5/+10
* netlink, conf: Actually get prefix/mask lengthStefano Brivio2021-10-191-2/+7
* pasta: Allow nanosleep(2) and clock_nanosleep(2) syscalls tooStefano Brivio2021-10-141-1/+1
* netlink, pasta: Configure MTU of tap interface on --config-netStefano Brivio2021-10-141-3/+3
* passt, pasta: Completely avoid dynamic memory allocationStefano Brivio2021-10-141-0/+253