| commit | 4b0c966fb6a35eabd6f06633a5c48ecff27ce2a5 | [log] [tgz] |
|---|---|---|
| author | Brian Norris <briannorris@chromium.org> | Fri Jul 02 00:56:28 2021 |
| committer | Commit Bot <commit-bot@chromium.org> | Fri Jul 02 18:51:26 2021 |
| tree | 8c8ad8ed7b4a24dca5f8e8086ae4e338f4aa159e | |
| parent | 387aa374551913374e9fac1b7bd1ffec896d5f72 [diff] |
daisydog: add cgroup namespace to minijail0 sandboxes Upstream Linux added cgroup namespace support in 4.6, and Chrome OS backported support to many more. Now that we've dropped some older kernels, we can unconditionally utilize this feature in Chrome OS. I found these files by searching for files with both "minijail0" and "--uts" in their text, as an easy grep'able starter. BUG=chromium:1204350 TEST=CQ Change-Id: I3fbd56859c1fbc0262dc22fc4e6291e968e09d6d Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/third_party/daisydog/+/3002053 Reviewed-by: Grant Grundler <grundler@chromium.org> Commit-Queue: Brian Norris <briannorris@chromium.org> Tested-by: Brian Norris <briannorris@chromium.org>
GPL Code is copied with explicit permission from Daniel Widyanto:
http://embeddedfreak.wordpress.com/2010/08/23/howto-use-linux-watchdog/
The project name is based on Samsung's “daisy” reference board design and I liked this quote from the daisy dog FAQ:
Daisy Dogs are not persnickety little ankle biters
When this daisydog doesn't run, the machine should reset. :)
An alternative code to start with would have been:
https://dev.openwrt.org/ticket/2270
The watchdog project is alot more complicated than what the Chromium OS project needs.