tree 2a612de100585c64679dbc0f81a249febdcb81a0
parent 1912c5b5e88455e0a0c03fd375d232a498edd95d
author Yu-Hsi Chiang <yuhsi@google.com> 1439459007 +0800
committer Samuel Tan <samueltan@google.com> 1444088391 -0700

minijail: Support pivot_root

Add an option that allows user to use pivot_root(2) when one want to
jail process in a chrooted environment. This implies entering a new
mount namespace since pivot_root(2) will really move the root
filesystem.

BUG=chromium:517844
TEST=security_Minijail0 passes

Change-Id: Ie990670703b00e333fa4abc3804d6384d36fa7c9
Reviewed-on: https://chromium-review.googlesource.com/293128
Commit-Ready: Yu-hsi Chiang <yuhsi@google.com>
Tested-by: Yu-hsi Chiang <yuhsi@google.com>
Reviewed-by: Jorge Lucangeli Obes <jorgelo@chromium.org>