tree abec2be342a99c3eeb80961182b7f56db24874b7
parent 6c7a45812a3fbd590a85bcc7fea84c614a851288
author Dylan Reid <dgreid@chromium.org> 1445586600 -0700
committer Dylan Reid <dgreid@google.com> 1446681522 -0800

minijail: Add ability to specify mounts

In addition to bind mounts, allow other mounts to be specified when
running minijail.  Expose this as a -k option to minijail0.

This will allow for file systems such as proc, sysfs, and devpts to be
mounted before taking away the permisison to mount from the target
program.

For example "-k sysfs,/sys,sysfs,0xe" will mount /sys in the new vfs
namespace.

BUG=b/24976046
TEST=Mount sysfs, run a shell, check that sysfs is mounted.

Change-Id: I9862e42e00ce76b1fab9cbac59c381f5270470ce
Signed-off-by: Dylan Reid <dgreid@google.com>