| Commit message (Expand) | Author | Age | Files | Lines |
* | Handle userns isolation and dropping root at the same time | David Gibson | 2022-09-13 | 1 | -5/+0 |
* | Move self-isolation code into a separate file | David Gibson | 2022-09-13 | 1 | -51/+0 |
* | Consolidate determination of UID/GID to run as | David Gibson | 2022-09-13 | 1 | -50/+0 |
* | Split checking for root from dropping root privilege | David Gibson | 2022-09-13 | 1 | -3/+26 |
* | Don't store UID & GID persistently in the context structure | David Gibson | 2022-09-13 | 1 | -6/+6 |
* | util: Drop any supplementary group before dropping privileges | Stefano Brivio | 2022-08-30 | 1 | -1/+1 |
* | Make substructures for IPv4 and IPv6 specific context information | David Gibson | 2022-07-30 | 1 | -2/+2 |
* | Allow different external interfaces for IPv4 and IPv6 connectivity | David Gibson | 2022-07-30 | 1 | -1/+1 |
* | util: Fix debug print on failed SO_REUSEADDR setting in sock_l4() | Stefano Brivio | 2022-07-14 | 1 | -1/+1 |
* | Remove unused line_read() | David Gibson | 2022-07-06 | 1 | -54/+0 |
* | Use new lineread implementation for procfs_scan_listen() | David Gibson | 2022-07-06 | 1 | -4/+6 |
* | conf: Add --runas option, changing to given UID and GID if started as root | Stefano Brivio | 2022-05-19 | 1 | -0/+52 |
* | conf, tcp, udp: Allow address specification for forwarded ports | Stefano Brivio | 2022-05-01 | 1 | -15/+12 |
* | treewide: Unchecked return value from library, CWE-252 | Stefano Brivio | 2022-04-07 | 1 | -4/+7 |
* | treewide: Fix android-cloexec-* clang-tidy warnings, re-enable checks | Stefano Brivio | 2022-03-29 | 1 | -1/+1 |
* | treewide: Mark constant references as const | Stefano Brivio | 2022-03-29 | 1 | -4/+4 |
* | treewide: Packet abstraction with mandatory boundary checks | Stefano Brivio | 2022-03-29 | 1 | -23/+37 |
* | util: Fix function declaration style of write_pidfile() | Stefano Brivio | 2022-03-29 | 1 | -1/+2 |
* | tcp, udp, util: Enforce 24-bit limit on socket numbers | Stefano Brivio | 2022-03-29 | 1 | -0/+7 |
* | tcp: Refactor to use events instead of states, split out spliced implementation | Stefano Brivio | 2022-03-28 | 1 | -0/+19 |
* | conf, util, tap: Implement --trace option for extra verbose logging | Stefano Brivio | 2022-03-25 | 1 | -0/+6 |
* | seccomp: Adjust list of allowed syscalls for armv6l, armv7l | Stefano Brivio | 2022-02-26 | 1 | -1/+2 |
* | passt, pasta: Namespace-based sandboxing, defer seccomp policy application | Stefano Brivio | 2022-02-21 | 1 | -16/+113 |
* | util: Avoid return of possibly truncated unsigned long in bitmap_isset() | Stefano Brivio | 2022-02-01 | 1 | -2/+2 |
* | passt: Address new clang-tidy warnings from LLVM 13.0.1 | Stefano Brivio | 2022-01-30 | 1 | -3/+5 |
* | tcp, udp, util: Fixes for bitmap handling on big-endian, casts | Stefano Brivio | 2022-01-26 | 1 | -3/+9 |
* | conf, pasta: Explicitly pass CLONE_{NEWUSER,NEWNET} to setns() | Stefano Brivio | 2022-01-26 | 1 | -2/+2 |
* | passt: Drop <linux/ipv6.h> include, carry own ipv6hdr and opt_hdr definitions | Stefano Brivio | 2022-01-26 | 1 | -2/+0 |
* | passt: Add cppcheck target, test, and address resulting warnings | Stefano Brivio | 2021-10-21 | 1 | -2/+2 |
* | passt: Fix build with gcc 7, use std=c99, enable some more Clang checkers | Stefano Brivio | 2021-10-21 | 1 | -4/+6 |
* | util: Go to next non-empty line, skip newlines in line_read() | Stefano Brivio | 2021-10-20 | 1 | -1/+5 |
* | passt: Add clang-tidy Makefile target and test, take care of warnings | Stefano Brivio | 2021-10-20 | 1 | -2/+3 |
* | passt: Static builds: don't redefine __vsyslog(), skip getpwnam() and initgro... | Stefano Brivio | 2021-10-16 | 1 | -4/+7 |
* | util, pasta: Don't read() and lseek() every single line in read_line() | Stefano Brivio | 2021-10-16 | 1 | -4/+23 |
* | util: Don't duplicate debug messages, they're already on stderr | Stefano Brivio | 2021-10-15 | 1 | -4/+4 |
* | passt, pasta: Completely avoid dynamic memory allocation | Stefano Brivio | 2021-10-14 | 1 | -12/+117 |
* | passt, pasta: Add seccomp support | Stefano Brivio | 2021-10-14 | 1 | -0/+2 |
* | util: Fix comment to bitmap_clear() | Stefano Brivio | 2021-10-14 | 1 | -1/+1 |
* | conf, tap: Split netlink and pasta functions, allow interface configuration | Stefano Brivio | 2021-10-14 | 1 | -1/+1 |
* | pasta: Allow specifying paths and names of namespaces | Giuseppe Scrivano | 2021-10-07 | 1 | -20/+8 |
* | tcp, tap: Turn tcp_probe_mem() into sock_probe_mem(), use for AF_UNIX socket too | Stefano Brivio | 2021-10-05 | 1 | -0/+28 |
* | conf, tcp: Periodic detection of bound ports for pasta port forwarding | Stefano Brivio | 2021-09-27 | 1 | -2/+6 |
* | util: Fix parsing of next option in ipv6_l4hdr() | Stefano Brivio | 2021-09-27 | 1 | -2/+1 |
* | passt, pasta: Introduce command-line options and port re-mapping | Stefano Brivio | 2021-09-01 | 1 | -24/+23 |
* | util: Don't close ping sockets if bind() fails | Stefano Brivio | 2021-08-04 | 1 | -3/+6 |
* | util: Fix millisecond logging timestamp calculation | Stefano Brivio | 2021-08-04 | 1 | -1/+1 |
* | tcp, udp: Allow binding ports in init namespace to both tap and loopback | Stefano Brivio | 2021-07-26 | 1 | -5/+9 |
* | checksum: Introduce AVX2 implementation, unify helpers | Stefano Brivio | 2021-07-26 | 1 | -80/+0 |
* | udp: Introduce recvmmsg()/sendmmsg(), zero-copy path from socket | Stefano Brivio | 2021-07-21 | 1 | -14/+26 |
* | passt: Add PASTA mode, major rework | Stefano Brivio | 2021-07-17 | 1 | -31/+131 |