mesos-reviews mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jacob Janco <jjanco....@gmail.com>
Subject Review Request 70757: Added a privs isolator.
Date Wed, 29 May 2019 18:47:10 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/70757/
-----------------------------------------------------------

Review request for mesos and James Peach.


Bugs: MESOS-9770
    https://issues.apache.org/jira/browse/MESOS-9770


Repository: mesos


Description
-------

This patch adds the isolation capability of flipping the
NO_NEW_PRIVILEGES bit for process control.


Diffs
-----

  include/mesos/slave/containerizer.proto b2e35cbf01caea6c1e4f45c7b7d833bc7f065099 
  src/CMakeLists.txt 1d4f541b73c07a307a8b61f217e0cfad5dc095e4 
  src/Makefile.am 5f97523fbe2d80733fbdcc7706f2761f5a071f9f 
  src/slave/containerizer/mesos/containerizer.cpp 043244841a73fa3f5f7119bc38f6d3a04be8990b

  src/slave/containerizer/mesos/isolators/linux/privs.hpp PRE-CREATION 
  src/slave/containerizer/mesos/isolators/linux/privs.cpp PRE-CREATION 
  src/slave/containerizer/mesos/launch.cpp 0c482f46a97063133edfe29ae3c6a2721d29f6c6 


Diff: https://reviews.apache.org/r/70757/diff/1/


Testing
-------


Thanks,

Jacob Janco


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message