sandboxed-api/sandboxed_api/sandbox2
Sandboxed API Team e1a9513783 Move few policies from tsan to All section.
munmap is widely used by sanitizer, but it
probably works for Asan/Msan because it's enabled
by unrelated Allow* call.

Move mprotect to shared part as well. It will be
needed for compress_stack_depot.

PiperOrigin-RevId: 431989551
Change-Id: I7695a2de81d8d0b2112d3308778b2e9a9c7cb596
2022-03-02 11:38:35 -08:00
..
examples Update zlib examples 2022-02-16 00:08:28 -08:00
network_proxy Remove comment on licenses() rule as per Google guidance. 2022-02-03 07:10:12 -08:00
testcases Link more complex test cases dynamically 2022-02-16 05:59:13 -08:00
unwind Apply page offset during stack unwinding/symbolization 2022-02-11 07:19:34 -08:00
util Apply page offset during stack unwinding/symbolization 2022-02-11 07:19:34 -08:00
bpfdisassembler.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
bpfdisassembler.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
buffer_test.cc Fix BlockSyscallsWithErrno 2022-02-21 00:46:50 -08:00
buffer.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
buffer.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
BUILD.bazel Introduce commandline flag to pass forkserver_bin path for Android builds. 2022-03-02 08:12:21 -08:00
client.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
client.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
CMakeLists.txt Introduce commandline flag to pass forkserver_bin path for Android builds. 2022-03-02 08:12:21 -08:00
comms_test.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
comms_test.proto Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
comms.cc Add a little more logging to failure cases. 2022-02-09 06:54:07 -08:00
comms.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
executor.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
executor.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
fork_client.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
fork_client.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
forkingclient.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
forkingclient.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
forkserver_bin.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
forkserver_test.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
forkserver.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
forkserver.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
forkserver.proto Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
global_forkclient_lib_ctor.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
global_forkclient.cc Introduce commandline flag to pass forkserver_bin path for Android builds. 2022-03-02 08:12:21 -08:00
global_forkclient.h Introduce commandline flag to pass forkserver_bin path for Android builds. 2022-03-02 08:12:21 -08:00
ipc_test.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
ipc.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
ipc.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
limits_test.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
limits.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
logserver.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
logserver.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
logserver.proto Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
logsink.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
logsink.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
monitor.cc Fix monitor for Android-ARM64 2022-03-02 06:42:42 -08:00
monitor.h Fix monitor for Android-ARM64 2022-03-02 06:42:42 -08:00
mounts_test.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
mounts.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
mounts.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
mounttree.proto Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
namespace_test.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
namespace.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
namespace.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
notify_test.cc Link more complex test cases dynamically 2022-02-16 05:59:13 -08:00
notify.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
policy_test.cc Link more complex test cases dynamically 2022-02-16 05:59:13 -08:00
policy.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
policy.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
policybuilder_test.cc Link more complex test cases dynamically 2022-02-16 05:59:13 -08:00
policybuilder.cc Move few policies from tsan to All section. 2022-03-02 11:38:35 -08:00
policybuilder.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
README.md Update references to the new documentation 2021-12-14 09:03:29 -08:00
regs_test.cc Fix -Wc++11-narrowing error with Clang introduced in 2546d9e 2022-01-14 03:40:01 -08:00
regs.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
regs.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
result.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
result.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
sandbox2_test.cc Link more complex test cases dynamically 2022-02-16 05:59:13 -08:00
sandbox2.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
sandbox2.h Delete deprecated ::sandbox2::Sandbox2::GetPid and its remaining call sites. 2022-02-02 09:57:11 -08:00
sanitizer_test.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
sanitizer.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
sanitizer.h Delete deprecated ::sandbox2::Sandbox2::WaitForTsan and its remaining call sites. 2022-02-03 11:23:56 -08:00
stack_trace_test.cc Link more complex test cases dynamically 2022-02-16 05:59:13 -08:00
stack_trace.cc Enable stack traces on AArch64 2022-02-08 06:23:52 -08:00
stack_trace.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
syscall_defs.cc Add new x86-64 syscalls 2021-06-04 01:01:34 -07:00
syscall_defs.h Move utility code into sandboxed_api/util 2021-01-13 09:25:52 -08:00
syscall_test.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
syscall.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
syscall.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
testing.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
util_test.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
util.cc Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
util.h Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00
violation.proto Change license link to HTTPS URL 2022-01-28 01:39:09 -08:00

Sandbox2

Sandbox2 is a C++ security sandbox for Linux which can be used to run untrusted programs or portions of programs in confined environments. The idea is that the runtime environment is so restricted that security bugs such as buffer overflows in the protected region cause no harm.

Documentation

Detailed developer documentation is available on the Google Developers site for Sandboxed API under Sandbox2.

There is also a Getting Started guide for Sandbox2.