gvisor/runsc
Andrei Vagin c0a981629c Start a sandbox process in a new userns only if CAP_SETUID is set
In addition, it fixes a race condition in TestMultiContainerGoferStop.
There are two scripts copy the same set of files into the same directory
and sometime one of this command fails with EXIST.

PiperOrigin-RevId: 230011247
Change-Id: I9289f72e65dc407cdcd0e6cd632a509e01f43e9c
2019-01-18 16:08:39 -08:00
..
boot Prevent internal tmpfs mount to override files in /tmp 2019-01-16 12:48:32 -08:00
cgroup Restore to original cgroup after sandbox and gofer processes are created 2019-01-09 09:18:15 -08:00
cmd runsc: create a new proc mount if the sandbox process is running in a new pidns 2019-01-18 12:17:34 -08:00
console
container Start a sandbox process in a new userns only if CAP_SETUID is set 2019-01-18 16:08:39 -08:00
fsgofer
sandbox Start a sandbox process in a new userns only if CAP_SETUID is set 2019-01-18 16:08:39 -08:00
specutils Restore to original cgroup after sandbox and gofer processes are created 2019-01-09 09:18:15 -08:00
test Prevent internal tmpfs mount to override files in /tmp 2019-01-16 12:48:32 -08:00
tools/dockercfg
BUILD
main.go