sandboxed-api/sandboxed_api
Oliver Kunz 04ed89906b Adding AllowOpen to AllowLlvmSanitizers to avoid having to add AllowOpen in addition when it's only needed for running under the sanitizers.
In cases where SAPI users overwrite the default policy instead of extending it, the sandbox will fail with an `openat` violation. This is automatically inherited in the default policy.

The advantage with this implementation is that we don't expose the open* syscalls when not running under the sanitizers.

PiperOrigin-RevId: 550845188
Change-Id: I151d467848983b00b71ec8447d662394fa7176db
2023-07-25 04:38:43 -07:00
..
bazel Do not use GIT in FetchContent_Declare 2023-07-19 05:20:28 -07:00
docs Update references to the new documentation 2021-12-14 09:03:29 -08:00
examples Use Protobuf's AbslStringify to stringify protos. 2023-06-26 00:33:33 -07:00
sandbox2 Adding AllowOpen to AllowLlvmSanitizers to avoid having to add AllowOpen in addition when it's only needed for running under the sanitizers. 2023-07-25 04:38:43 -07:00
tools Internal Code Change 2023-07-12 22:13:27 -07:00
util Internal Code Change 2023-07-12 01:09:40 -07:00
BUILD.bazel Mostly internal change: Optimize OSS transforms 2023-06-07 02:23:18 -07:00
call.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
client.cc Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
CMakeLists.txt CMake: Make the path to the Clang tool configurable 2023-05-12 00:29:55 -07:00
config.h For the SECCOMP event, check if the event msg is in the range of one of the known architectures. 2022-08-31 08:09:37 -07:00
embed_file.cc Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
embed_file.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
file_toc.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
lenval_core.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
proto_arg.proto Migration of remaining protobufs from proto2 to proto3 2022-03-16 00:43:46 -07:00
proto_helper.cc Change to proto2::MessageLite and resolve reflextion for mobile builds 2022-03-03 04:48:30 -08:00
proto_helper.h Change to proto2::MessageLite and resolve reflextion for mobile builds 2022-03-03 04:48:30 -08:00
rpcchannel.cc Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
rpcchannel.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
sandbox.cc Remove superfluous set_rlimit_as(RLIM64_INFINITY) 2023-03-03 01:14:31 -08:00
sandbox.h ...remove deprecated SetWallTimeLimit variant. 2023-05-12 05:22:52 -07:00
sapi_test.cc #Cleanup: Consistently use std::make_unique 2022-10-12 05:23:42 -07:00
testing.cc Run more tests with coverage and sanitizers 2023-03-02 08:46:07 -08:00
testing.h Run more tests with coverage and sanitizers 2023-03-02 08:46:07 -08:00
transaction.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
transaction.h Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
var_abstract.cc Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
var_abstract.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
var_array.h Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
var_int.cc Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
var_int.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
var_lenval.cc Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
var_lenval.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
var_proto.h #Cleanup: Consistently use std::make_unique 2022-10-12 05:23:42 -07:00
var_ptr.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
var_reg.h Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
var_struct.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
var_type.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
var_void.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
vars.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00