Tiago Natel
4a79e9631b
Added clone syscall check for uid/gid mapping.
...
Now it's possible to pass -DNXT_HAVE_CLONE=0 for debugging.
2019-10-28 16:02:40 +00:00
Tiago Natel
0b02e74abc
Releasing the memory of removed thread pools at exit.
2019-10-28 15:49:03 +00:00
Tiago Natel
23b94fde83
Improved error logging when uid/gid map is not properly set.
...
When using "credential: true", the new namespace starts with a completely
empty uid and gid ranges. Then, any setuid/setgid/setgroups calls using ids
not properly mapped with uidmap and gidmap fields return EINVAL, meaning
the id is not valid inside the new namespace.
2019-10-22 14:46:15 +00:00
Tiago Natel
0beb8ea5e1
Fixed passing false in namespace flags.
...
This patch closes #328 in github.
2019-10-11 10:00:06 +00:00
Tiago Natel
93ead87810
Removed linux/sched.h include.
...
The <sched.h> is already included by nxt_unix.h.
This closes #314 PR on GitHub.
2019-09-20 13:08:04 +00:00
Tiago Natel
20628c74fa
Releasing init struct in case of errors.
...
Found by Coverity (CID 349485).
2019-09-20 13:12:04 +00:00
Tiago Natel
7f389c814a
Closing leaking file descriptor.
...
Found by Coverity (CID 349484).
2019-09-20 13:16:33 +00:00
Tiago de Bem Natel de Moura
c554941b4f
Initial applications isolation support using Linux namespaces.
2019-09-19 15:25:23 +03:00
Tiago Natel