{"push_id":1281390842,"size":7,"distinct_size":7,"ref":"refs/heads/2016-09-02/no_new_privileges","head":"cecadbb1b52858cb2dc36d76823cc948907bef89","before":"f50194cac87d5d41699a225090b4dc081643a358","commits":[{"sha":"a8b55ce5bd08d3dc7bc6c784a4001ac0dec01689","author":{"name":"Christian Brauner","email":"6378c93c1a3c66ad39a2d15eb6b9ab4f0dbab2a6@mailbox.org"},"message":"conf, confile: add option for PR_SET_NO_NEW_PRIVS\n\nSigned-off-by: Christian Brauner <christian.brauner@mailbox.org>","distinct":true,"url":"https://api.github.com/repos/brauner/lxc/commits/a8b55ce5bd08d3dc7bc6c784a4001ac0dec01689"},{"sha":"c04bed0aa572c71db5d731d8abc566137d2b6439","author":{"name":"Christian Brauner","email":"6378c93c1a3c66ad39a2d15eb6b9ab4f0dbab2a6@mailbox.org"},"message":"start: set PR_SET_NO_NEW_PRIVS when requested\n\nSigned-off-by: Christian Brauner <christian.brauner@mailbox.org>","distinct":true,"url":"https://api.github.com/repos/brauner/lxc/commits/c04bed0aa572c71db5d731d8abc566137d2b6439"},{"sha":"fe9f5214d3a218c70deb213eef07b2075601d1e5","author":{"name":"Christian Brauner","email":"6378c93c1a3c66ad39a2d15eb6b9ab4f0dbab2a6@mailbox.org"},"message":"attach_options: add LXC_ATTACH_NO_NEW_PRIVS\n\nAdd a flag for PR_SET_NO_NEW_PRIVS. It is off by default.\n\nSigned-off-by: Christian Brauner <christian.brauner@mailbox.org>","distinct":true,"url":"https://api.github.com/repos/brauner/lxc/commits/fe9f5214d3a218c70deb213eef07b2075601d1e5"},{"sha":"876d6972fb521d9d711a335655bac2f1bb0754a9","author":{"name":"Christian Brauner","email":"6378c93c1a3c66ad39a2d15eb6b9ab4f0dbab2a6@mailbox.org"},"message":"attach: call lxc_container_new() earlier\n\nWe will reuse the newly initialized container for PR_SET_NO_NEW_PRIVS.\n\nSigned-off-by: Christian Brauner <christian.brauner@mailbox.org>","distinct":true,"url":"https://api.github.com/repos/brauner/lxc/commits/876d6972fb521d9d711a335655bac2f1bb0754a9"},{"sha":"43fd0a80b7ee1607c3479f4ccaab40f4dee96d61","author":{"name":"Christian Brauner","email":"6378c93c1a3c66ad39a2d15eb6b9ab4f0dbab2a6@mailbox.org"},"message":"attach: use PR_SET_NO_NEW_PRIVS\n\n- When we detect that the container, we want to attach to, has been stared with\n  PR_SET_NO_NEW_PRIVS we attach with PR_SET_NO_NEW_PRIVS as well. (We might\n  relax this restriction later but let's be strict for now.)\n- When LXC_ATTACH_NO_NEW_PRIVS is set in the flags passed to\n  lxc_attach()/attach_child_main() then we set PR_SET_NO_NEW_PRIVS irrespective\n  of whether the container was started with PR_SET_NO_NEW_PRIVS or not.\n\nSigned-off-by: Christian Brauner <christian.brauner@mailbox.org>","distinct":true,"url":"https://api.github.com/repos/brauner/lxc/commits/43fd0a80b7ee1607c3479f4ccaab40f4dee96d61"},{"sha":"66b629bedf8afb34b06a3c0e53a61fccba2ae47d","author":{"name":"Christian Brauner","email":"6378c93c1a3c66ad39a2d15eb6b9ab4f0dbab2a6@mailbox.org"},"message":"doc: add lxc.no_new_privs to lxc.container.conf\n\nSigned-off-by: Christian Brauner <christian.brauner@mailbox.org>","distinct":true,"url":"https://api.github.com/repos/brauner/lxc/commits/66b629bedf8afb34b06a3c0e53a61fccba2ae47d"},{"sha":"cecadbb1b52858cb2dc36d76823cc948907bef89","author":{"name":"Christian Brauner","email":"6378c93c1a3c66ad39a2d15eb6b9ab4f0dbab2a6@mailbox.org"},"message":"tests: add test for PR_SET_NO_NEW_PRIVS\n\nSigned-off-by: Christian Brauner <christian.brauner@mailbox.org>","distinct":true,"url":"https://api.github.com/repos/brauner/lxc/commits/cecadbb1b52858cb2dc36d76823cc948907bef89"}]}
{"actor":{"display_login":"brauner"}}