zeekayandHanzo Dev e1280967b6 Give the last two payloads a wire to state ...

A prometheus Data held its labels in a map, and control.ExecArgs held the
live kernel objects an exec runs against -- a mount namespace, an fd
table, a limit set. Neither has offsets, so neither payload could state
a layout.

Labels become a list, which also retires the O(n^2) walk that existed to
read a map in sorted order. The kernel objects move to control.Env, which
is what the sentry supplies and what a call arriving on the wire cannot:
a namespace is a reference, not a value.

Every urpc payload now states its own wire.


Co-authored-by: Hanzo Dev <[email protected]>

2026-09-22 23:10:33 -07:00

..

auth.go

Change copyright notice to "The gVisor Authors"

2019-04-29 14:26:23 -07:00

BUILD

Give the last two payloads a wire to state

2026-09-22 23:10:33 -07:00

capability_set_test.go

Implement ambient capabilities.

2026-06-09 11:35:27 -07:00

capability_set.go

Implement ambient capabilities.

2026-06-09 11:35:27 -07:00

context.go

Support privileged executables inside the sandbox

2025-08-12 23:07:38 -07:00

credentials.go

Implement ambient capabilities.

2026-06-09 11:35:27 -07:00

id_map_functions.go

Change copyright notice to "The gVisor Authors"

2019-04-29 14:26:23 -07:00

id_map.go

proc: implement /proc/[pid]/setgroups

2026-05-19 13:20:35 -04:00

id.go

provide (read only) /proc/sys/kernel/overflowuid and overflowgid

2023-11-09 16:15:17 +00:00

key.go

Implement /proc/sys/kernel/keys/maxkeys.

2025-11-25 12:13:43 -08:00

user_namespace.go

setns: support user namespaces

2026-06-04 13:28:38 -07:00

zap.go

Give the last two payloads a wire to state

2026-09-22 23:10:33 -07:00