phpged/unit
1
0
Fork 0
Code Issues 1 Pull requests Projects 1 Releases Packages Wiki Activity
unit/auto
History
Tiago Natel 411daeaa53 Isolation: allowed the use of credentials with unpriv userns. 
The setuid/setgid syscalls requires root capabilities but if the kernel
supports unprivileged user namespace then the child process has the full
set of capabilities in the new namespace, then we can allow setting "user"
and "group" in such cases (this is a common security use case).

Tests were added to ensure user gets meaningful error messages for
uid/gid mapping misconfigurations.
2019-12-06 16:52:50 +00:00
..
cc Using compiler capability to generate dependencies. 2017-12-01 16:28:06 +03:00
echo Fixed displaying "echo" program building failure. 2017-09-22 20:13:55 +03:00
modules Python: fixing Python 3.8 build with clang. 2019-10-23 14:04:29 +03:00
os Respecting AR environment variable to configure ar binary. 2019-11-07 19:53:25 +03:00
atomic Macros for atomic 'OR' and 'AND' operations introduced. 2017-04-21 16:55:13 +03:00
capability Initial applications isolation support using Linux namespaces. 2019-09-19 15:25:23 +03:00
clang Using own popcount where the compiler builtin is not available. 2018-06-20 19:34:06 +03:00
events Initial version. 2017-01-17 20:00:00 +03:00
feature PHP: fixed building on MacOSX with --ld-opt= option. 2018-05-30 18:31:26 +03:00
files Initial version. 2017-01-17 20:00:00 +03:00
have Initial version. 2017-01-17 20:00:00 +03:00
help Java: added java module in configure help. 2019-05-30 15:02:10 +03:00
isolation Isolation: allowed the use of credentials with unpriv userns. 2019-12-06 16:52:50 +00:00
make Respecting AR environment variable to configure ar binary. 2019-11-07 19:53:25 +03:00
malloc Checking mallopt() during configure. 2017-09-25 17:53:10 +03:00
mmap Initial version. 2017-01-17 20:00:00 +03:00
options Installing libunit headers and static library. 2018-10-17 15:52:44 +03:00
pcre Initial version. 2017-01-17 20:00:00 +03:00
save Added Node.js support. 2018-10-03 17:50:03 +03:00
sendfile Initial version. 2017-01-17 20:00:00 +03:00
shmem Added support for shm_open(SHM_ANON) extension. 2018-03-06 13:55:51 +00:00
sockets Initial version. 2017-01-17 20:00:00 +03:00
sources Isolation: allowed the use of credentials with unpriv userns. 2019-12-06 16:52:50 +00:00
ssltls Added SSL/TLS support on connection level. 2018-09-20 15:05:37 +03:00
summary Initial applications isolation support using Linux namespaces. 2019-09-19 15:25:23 +03:00
test_build Initial version. 2017-01-17 20:00:00 +03:00
threads Removed deprecated MacOSX OSSpinLockLock(). 2018-09-17 16:37:17 +03:00
time Better checking for shm_open() during configure. 2017-09-27 18:34:23 +03:00
types Initial version. 2017-01-17 20:00:00 +03:00
unix Changed the group listing to run unprivileged when possible. 2019-11-26 16:15:23 +00:00