This makes the code in controller.go simple, especially
for multi-container restore that requires taking ownership
of files.
PiperOrigin-RevId: 627165958
This helps to rectify a long standing problem of Systrap panicking
when encountering corrupted sysmsg stub memory.
These errors specifically are easier to notice and debug since we
check for them in the stub code and flag them to the sentry
explicitly. They are now very grep-able to make finding their origin
in the stub code easier.
PiperOrigin-RevId: 604743496
With the introduction of precompiled seccomp filters, we need three more
concepts that go into building the set of seccomp filters for a `Platform`:
- "Precompiled configurations": A list of platform configurations for which
the seccomp filters get precompiled into the Sentry.
- "Config key": A string that identifies each configuration of the syscall
filters of that platform. This is necessary to identify *which* precompiled
seccomp filter to use at runtime.
- "Variables": A set of named variables that are runtime inputs in syscall
filters. For example, the FD of the KVM device in the KVM platform.
Systrap is the only serious user of this, due to its need for a variable.
The other platforms return a basic struct which simply carries what the
previous two methods did.
I think we should have the KVM VM FD as part of the KVM filters; if we did,
that would be another variable.
This CL is a preamble to actually precompile seccomp filters.
PiperOrigin-RevId: 583482945
Split usermem package to help remove syserror dependency in go_marshal.
New hostarch package contains code not dependent on syserror.
PiperOrigin-RevId: 365651233
Because the abi will depend on the core types for marshalling (usermem,
context, safemem, safecopy), these need to be flattened from the sentry
directory. These packages contain no sentry-specific details.
PiperOrigin-RevId: 291811289
Nothing reads them and they can simply get stale.
Generated with:
$ sed -i "s/licenses(\(.*\)).*/licenses(\1)/" **/BUILD
PiperOrigin-RevId: 231818945
Change-Id: Ibc3f9838546b7e94f13f217060d31f4ada9d4bf0
We have been unnecessarily creating too many savable types implicitly.
PiperOrigin-RevId: 206334201
Change-Id: Idc5a3a14bfb7ee125c4f2bb2b1c53164e46f29a8
Fabricio VoznikaandgVisor bot
Konstantin BogomolovandgVisor bot
Etienne PerotandgVisor bot
Adin ScannellandgVisor bot
Zach KoopmansandgVisor bot
Jamie LiuandgVisor bot
Andrei VaginandgVisor bot
Kevin KrakauerandgVisor bot
Michael PrattandShentubot
Zhaozhong NiandShentubot
GooglerandAdin Scannell