sandboxed-api/sandboxed_api/sandbox2
Wiktor Garbacz 7ba0a794d1 Fix check for init process
PiperOrigin-RevId: 532473530
Change-Id: Ia5f84073e372a63f70425d0fa68ac178019e80be
2023-05-16 08:51:15 -07:00
..
examples Internal Code Change 2023-03-27 08:14:10 -07:00
network_proxy
testcases Seccomp_unotify based monitor 2023-03-08 08:09:34 -08:00
unwind Remove unused UnwindResult.ip, reuse RunLibUnwindAndSymbolizer 2023-03-02 02:40:15 -08:00
util Add explicit casts to avoid build failures 2023-03-07 05:02:45 -08:00
allow_all_syscalls.h Fix typo 2023-05-04 00:46:53 -07:00
allow_unrestricted_networking.h Implements the ability to control who is allowed to enable unrestricted networking. 2023-05-03 23:29:34 -07:00
bpfdisassembler_test.cc Add test for bpf disassembler 2023-03-07 05:04:09 -08:00
bpfdisassembler.cc Add test for bpf disassembler 2023-03-07 05:04:09 -08:00
bpfdisassembler.h
buffer_test.cc Run more tests with coverage and sanitizers contd 2023-03-03 06:51:06 -08:00
buffer.cc Remove Tag constructor, add standard comment for absl::WrapUnique(new T) 2022-10-25 06:20:51 -07:00
buffer.h
BUILD.bazel Automated rollback of commit f6fd27618b. 2023-05-04 06:53:48 -07:00
client.cc Seccomp_unotify based monitor 2023-03-08 08:09:34 -08:00
client.h Seccomp_unotify based monitor 2023-03-08 08:09:34 -08:00
CMakeLists.txt Remove leftover stack_trace sources from sandbox2 target 2023-05-11 04:59:29 -07:00
comms_test.cc Comms constructor for non abstract sockets 2023-03-23 07:34:32 -07:00
comms_test.proto
comms.cc Comms constructor for non abstract sockets 2023-03-23 07:34:32 -07:00
comms.h Comms constructor for non abstract sockets 2023-03-23 07:34:32 -07:00
executor.cc Seccomp_unotify based monitor 2023-03-08 08:09:34 -08:00
executor.h Copy environ in sandbox2_test to get better coverage data 2023-03-22 05:47:00 -07:00
fork_client.cc Automated rollback of commit f6fd27618b. 2023-05-04 06:53:48 -07:00
fork_client.h Seccomp_unotify based monitor 2023-03-08 08:09:34 -08:00
forkingclient.cc Do not exit from within ForkServer to get more precise coverage data 2023-03-29 02:22:16 -07:00
forkingclient.h
forkserver_bin.cc Remove WaitForSanitizers from ptrace monitor & add to global forkserver 2023-05-10 05:06:18 -07:00
forkserver_test.cc Automated rollback of commit 8c53262539. 2023-05-03 08:45:11 -07:00
forkserver.cc Automated rollback of commit f6fd27618b. 2023-05-04 06:53:48 -07:00
forkserver.h Do not exit from within ForkServer to get more precise coverage data 2023-03-29 02:22:16 -07:00
forkserver.proto Seccomp_unotify based monitor 2023-03-08 08:09:34 -08:00
global_forkclient_lib_ctor.cc
global_forkclient.cc Automated rollback of commit f6fd27618b. 2023-05-04 06:53:48 -07:00
global_forkclient.h
ipc_test.cc Run more tests with coverage and sanitizers contd 2023-03-03 06:51:06 -08:00
ipc.cc
ipc.h
limits_test.cc Run more tests with coverage and sanitizers contd 2023-03-03 06:51:06 -08:00
limits.h
logserver.cc
logserver.h Use Abseil's log/flags instead of glog/gflags 2022-10-20 06:48:51 -07:00
logserver.proto
logsink.cc
logsink.h
monitor_base.cc Fix check for init process 2023-05-16 08:51:15 -07:00
monitor_base.h Seccomp_unotify based monitor 2023-03-08 08:09:34 -08:00
monitor_ptrace.cc Remove WaitForSanitizers from ptrace monitor & add to global forkserver 2023-05-10 05:06:18 -07:00
monitor_ptrace.h
monitor_unotify.cc Fix the poll in wait_for_sandboxee branch 2023-03-14 09:19:30 -07:00
monitor_unotify.h Seccomp_unotify based monitor 2023-03-08 08:09:34 -08:00
mount_tree.proto
mounts_test.cc
mounts.cc Make SAPI_RAW_LOG(FATAL, ...) noreturn 2023-03-20 05:43:28 -07:00
mounts.h
namespace_test.cc Migrate namespaces related tests out of policybuilder_test 2023-03-06 07:08:49 -08:00
namespace.cc Remove no longer needed friend declaration 2023-03-22 06:27:21 -07:00
namespace.h Remove no longer needed friend declaration 2023-03-22 06:27:21 -07:00
notify_test.cc Run more tests with coverage and sanitizers contd 2023-03-03 06:51:06 -08:00
notify.h
policy_test.cc Run more tests with coverage and sanitizers contd 2023-03-03 06:51:06 -08:00
policy.cc Add missing LOAD_SYSCALL_NR 2023-03-15 03:29:56 -07:00
policy.h Seccomp_unotify based monitor 2023-03-08 08:09:34 -08:00
policybuilder_test.cc Migrate namespaces related tests out of policybuilder_test 2023-03-06 07:08:49 -08:00
policybuilder.cc Implements the ability to control who is allowed to enable unrestricted networking. 2023-05-03 23:29:34 -07:00
policybuilder.h Implements the ability to control who is allowed to enable unrestricted networking. 2023-05-03 23:29:34 -07:00
README.md
regs_test.cc
regs.cc
regs.h
result.cc
result.h
sandbox2_test.cc Copy environ in sandbox2_test to get better coverage data 2023-03-22 05:47:00 -07:00
sandbox2.cc Partial support for sandbox2::Notify in UnotifyMonitor 2023-03-10 00:59:37 -08:00
sandbox2.h Seccomp_unotify based monitor 2023-03-08 08:09:34 -08:00
sanitizer_test.cc Run more tests with coverage and sanitizers contd 2023-03-03 06:51:06 -08:00
sanitizer.cc
sanitizer.h
stack_trace_test.cc Fix stack_trace_test for ARM64 2023-03-06 07:07:55 -08:00
stack_trace.cc Remove superfluous set_rlimit_as(RLIM64_INFINITY) 2023-03-03 01:14:31 -08:00
stack_trace.h
syscall_defs.cc
syscall_defs.h
syscall_test.cc
syscall.cc
syscall.h Seccomp_unotify based monitor 2023-03-08 08:09:34 -08:00
testing.h
util_test.cc Add tests for util.cc 2023-03-14 00:04:14 -07:00
util.cc Dump coverage prior to execveat 2023-03-28 05:50:43 -07:00
util.h Dump coverage prior to execveat 2023-03-28 05:50:43 -07:00
violation.proto Add field to track policy source location 2023-02-24 07:55:23 -08:00

Sandbox2

Sandbox2 is a C++ security sandbox for Linux which can be used to run untrusted programs or portions of programs in confined environments. The idea is that the runtime environment is so restricted that security bugs such as buffer overflows in the protected region cause no harm.

Documentation

Detailed developer documentation is available on the Google Developers site for Sandboxed API under Sandbox2.

There is also a Getting Started guide for Sandbox2.