sandboxed-api/sandboxed_api
Wiktor Garbacz 0d3d5d4bcb Seccomp_unotify based monitor
Unotify based monitor should bring big performance wins
if the sandboxee heavily uses threading or signals.
Some of the features are not supported in that mode:
- execveat is always allowed instead of just the initial one
- stack traces are not collected on normal exit or if the process is terminated by signal

PiperOrigin-RevId: 515040101
Change-Id: Ia5574d34b4ff7e91e3601edb8c9cb913e011fbf6
2023-03-08 08:09:34 -08:00
..
bazel Handle S2 unwinding by trapping ptrace 2022-11-30 06:00:29 -08:00
docs Update references to the new documentation 2021-12-14 09:03:29 -08:00
examples Internal change 2022-11-29 00:48:47 -08:00
sandbox2 Seccomp_unotify based monitor 2023-03-08 08:09:34 -08:00
tools Replace llvm::makeArrayRef with ArrayRef constructors. 2023-01-10 15:14:03 -08:00
util Rename and move CreateDirRecursive 2023-02-16 10:44:01 -08:00
BUILD.bazel Run more tests with coverage and sanitizers 2023-03-02 08:46:07 -08:00
call.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
client.cc Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
CMakeLists.txt Run more tests with coverage and sanitizers 2023-03-02 08:46:07 -08:00
config.h For the SECCOMP event, check if the event msg is in the range of one of the known architectures. 2022-08-31 08:09:37 -07:00
embed_file.cc Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
embed_file.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
file_toc.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
lenval_core.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
proto_arg.proto Migration of remaining protobufs from proto2 to proto3 2022-03-16 00:43:46 -07:00
proto_helper.cc Change to proto2::MessageLite and resolve reflextion for mobile builds 2022-03-03 04:48:30 -08:00
proto_helper.h Change to proto2::MessageLite and resolve reflextion for mobile builds 2022-03-03 04:48:30 -08:00
rpcchannel.cc Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
rpcchannel.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
sandbox.cc Remove superfluous set_rlimit_as(RLIM64_INFINITY) 2023-03-03 01:14:31 -08:00
sandbox.h Internal Changes 2022-05-19 04:55:24 -07:00
sapi_test.cc #Cleanup: Consistently use std::make_unique 2022-10-12 05:23:42 -07:00
testing.cc Run more tests with coverage and sanitizers 2023-03-02 08:46:07 -08:00
testing.h Run more tests with coverage and sanitizers 2023-03-02 08:46:07 -08:00
transaction.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
transaction.h Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
var_abstract.cc Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
var_abstract.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
var_array.h Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
var_int.cc Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
var_int.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
var_lenval.cc Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
var_lenval.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
var_proto.h #Cleanup: Consistently use std::make_unique 2022-10-12 05:23:42 -07:00
var_ptr.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
var_reg.h Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
var_struct.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
var_type.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
var_void.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
vars.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00