commit | ce5b55eb48f276951b6c4d1bbfc667240c1e8f2f | [log] [tgz] |
---|---|---|
author | Dylan Reid <dgreid@chromium.org> | Wed Jan 13 11:04:16 2016 -0800 |
committer | Dylan Reid <dgreid@google.com> | Wed Jan 20 11:46:48 2016 -0800 |
tree | 0154d1b200f05909670470cfcc220b07b1be344d | |
parent | 33b967df36fe2b3997ead2c139efb4775946a612 [diff] |
Separate child process sync from user namespace Syncing the child and parent was only done so that the uid/gid maps could be setup. Make this more general so that the next commit can add setting of cgroups which also wants to happen after the child forks but before the jailed process is run similar top uid/gid map setting. BUG=b/26549867 TEST=security_Minijail0 Change-Id: I81d512f351cfe459cd7af4c55263504d22b929fa Signed-off-by: Dylan Reid <dgreid@chromium.org>