1. 3ab8f9d Fix linux-sandbox failure when there is a mount points under /tmp by Yuki Yugui Sonoda · 8 years ago
  2. 3000d88 Fix #1719: Sandbox should print better error message on execvp failure. by Philipp Wollermann · 8 years ago
  3. f28dbc3 Patches to compile against musl by Steven Dee · 8 years ago
  4. 27085f4 Remove JavaCpuSupplier; use the actual --cpu value instead. by Ulf Adams · 8 years ago
  5. 8896dad Windows, native: add windows_msvc config_setting by Laszlo Csomor · 9 years ago
  6. f8ce97e Fix #1671: Use a better approach to reap child processes, which fixes the occasional hangs seen during builds and on Bazel CI. by Philipp Wollermann · 9 years ago
  7. 52f4e8b Fix Bazel failing to build anything when its workspace or output base is in /tmp. by Philipp Wollermann · 9 years ago
  8. e219a24 Implement the first stage of Bazel's "Sandbox 2.0" for Linux. by Philipp Wollermann · 9 years ago
  9. 774553e Add a test for sandboxing when nobody's UID is different by Brian Silverman · 9 years ago
  10. feb5d08 call SetupDirectories after uids are mapped in the user namespace by Jason Lunz · 9 years ago
  11. 31b059f Short-circuit runfiles tree creation if runfiles are disabled (for example, on Windows by default) by Lukacs Berki · 9 years ago
  12. 278814b Rename namespace-sandbox/-runner to linux-sandbox. by Philipp Wollermann · 9 years ago
  13. 9bf3f6a Rollback of commit 1e37a5375f918376c132fa537e25695f673f41b8. by Dmitry Lomov · 9 years ago
  14. 1e37a53 Do redirection of stdout / stderr in Java instead of reimplementing it in every process wrapper again. by Philipp Wollermann · 9 years ago
  15. 176ab1d Rollback of commit 2ee0377d835af26a6488ad7b80291953860c4dce. by Philipp Wollermann · 9 years ago
  16. a148b4c Disable runfiles on Windows. by Dmitry Lomov · 9 years ago
  17. 2ee0377 sandbox: Mount input files and directories actually read-only. Fixes #1364. by Philipp Wollermann · 9 years ago
  18. 69fa699 sandbox: So refactoring, much no-op change, wow. by Philipp Wollermann · 9 years ago
  19. 06212ef Do not try to install a default handler for SIGSTOP and SIGKILL. by Philipp Wollermann · 9 years ago
  20. 197543a Move xcode-locator into src/tools packages, defining it as a target under @bazel_tools. Currently the tool still remains in embedded_binaries, but we will migrate away from that: Eventually it can simply live just under @bazel_tools. by Chris Parsons · 9 years ago
  21. ddc4e22 Make deleting runfiles tree on Windows "best effort". by Dmitry Lomov · 9 years ago
  22. e1ab2ba Print out the error from getpwuid instead of segfaulting by Brian Silverman · 9 years ago
  23. c9bb9f0 Fix sandbox when nobody's uid != 65534 by Brian Silverman · 9 years ago
  24. 6ffb8e4 Fixes bugs so that we can build bazel with bazel twice without cleaning up on Windows by Yun Peng · 9 years ago
  25. 386f242 Automated [] rollback of commit 525fa71b0d6f096e9bfb180f688a4418c4974eb4. by Yue Gan · 9 years ago
  26. 83781f7 Fixes bugs so that we can build bazel with bazel on Windows by Yun Peng · 9 years ago
  27. 525fa71 Mount whole directories into the sandbox when possible by Brian Silverman · 9 years ago
  28. de54bca Add a bazel-srcs target to the top-level package containing all Bazel sources by Damien Martin-Guillerez · 9 years ago
  29. 3b58ea9 Exclude weirdly-named files from the JDK. by Lukacs Berki · 9 years ago
  30. 4b59929 Workaround gcc bug. by Dmitry Lomov · 9 years ago
  31. 40ee9de sandbox: Easier debugging of sandbox failures, when using both --verbose_failures and --sandbox_debug. by Yue Gan · 9 years ago
  32. c8424a6 xcode_locator outputs developer directories instead of xcode paths by Chris Parsons · 9 years ago
  33. 9e100ac Always create /tmp directory in the sandbox (fixes #913). by Philipp Wollermann · 9 years ago
  34. bbe7480 Use hard links to create empty files. by Brian Silverman · 9 years ago
  35. 14c49ac Fix JDK tools extensions for Windows. by Dmitry Lomov · 9 years ago
  36. 458ccd0 Introduce a special CPU for Windows and add msys compiler toolchain. by Dmitry Lomov · 9 years ago
  37. 546c265 Add a (working) windows compatibility mode that makes Bazel create hardlinks for links to writable files. by Lukacs Berki · 9 years ago
  38. 41aaf39 Query for user nobody and exit sandbox if unable to find. by Pedro Kiefer · 9 years ago
  39. f488818 Add xcode_locator to bazel's embedded binaries. by Chris Parsons · 9 years ago
  40. 197fd6a Upstream some basic changes from dslomov windows branch. by Dmitry Lomov · 9 years ago
  41. 234cc16 Export xjc and wsimport tools from JDK by Alpha Lam · 9 years ago
  42. bdbf75f Fix build on FreeBSD. by Googler · 9 years ago
  43. 5d96a28 handle darwin_x86_64 target cpu by Chris Parsons · 9 years ago
  44. d6722d6 Print the name of the execvp'd file for easier debugging in case the call fails. by Philipp Wollermann · 9 years ago
  45. 553499a Fix for SIOCGIFINDEX undefined on Mac (https://github.com/bazelbuild/bazel/issues/510) by Dave MacLachlan · 9 years ago
  46. 40ea964 Make the sandbox handle an arbitrary number of arguments by Brian Silverman · 9 years ago
  47. 1940933 Introduce two new options to Linux sandbox wrapper: by Ming Zhao · 9 years ago
  48. 76c0e49 sandbox: Push creation of needed empty directories (like /tmp, TEST_TMPDIR) into the namespace-sandbox, instead of doing it in Java. This fixes an issue where the namespace-sandbox would check-fail on an mkdir() of a directory that was already created in the LinuxSandboxedStrategy. by Philipp Wollermann · 9 years ago
  49. f88f4d8 Rationalize copyright headers by Damien Martin-Guillerez · 10 years ago
  50. 17ef915 sandbox: Show user-friendly mount paths in the namespace-sandbox debug log. by Philipp Wollermann · 10 years ago
  51. 450b1b2 sandbox: When spawn.getInputs() contains a directory, recurse into it and mount the individual files. by Philipp Wollermann · 10 years ago
  52. fbc772d Fix up documentation that was backwards for KillEverything. by Dave MacLachlan · 10 years ago
  53. 4811410 Make writes thread-safe during local tests by opening files with O_APPEND. by Eric Fellheimer · 10 years ago
  54. 709bc61 Port to FreeBSD. by Doug Rabson · 10 years ago
  55. 590ea39 Instead of assuming that sandboxing will generally work on everything that is Linux, do real auto-detection whether it is supported on the host or not and enable / disable it based on the result. by Philipp Wollermann · 10 years ago
  56. e45d16c namespace-sandbox: Actually do exponential backoff on a failed unshare() syscall. by Philipp Wollermann · 10 years ago
  57. 43c4a1a Execute spawns inside sandboxes to improve hermeticity (spawns can no longer use non-declared inputs) and safety (spawns can no longer affect the host system, e.g. accidentally wipe your home directory). This implementation works on Linux only and uses Linux containers ("namespaces"). by Philipp Wollermann · 10 years ago
  58. c8db70c Improve the JDK and JRE filegroups to include all the necessary parts. Then fix the Skylark rules and tests that so far failed to declare dependencies on the JVM. by Philipp Wollermann · 10 years ago
  59. 351e9db Reintroduce langtools and langtools-neverlink in jdk.BUILD by Damien Martin-Guillerez · 10 years ago
  60. 1ed3c47 Move the Error Prone plugin into Bazel by Liam Miller-Cushon · 10 years ago
  61. e753ecf Get jdk.WORKSPACE into the default WORKSPACE file by reading it as a Java resource, then passing it to the parser as a string instead of putting it into embedded_binaries then passing a Path to it to the parser. by Lukacs Berki · 10 years ago
  62. 0bf90f7 Remove tools/jdk/jdk symbolic link creation by Damien Martin-Guillerez · 10 years ago
  63. e01aa68 Simplify genproto.bzl. by Han-Wen Nienhuys · 10 years ago
  64. d58e680 process-wrapper: only define _GNU_SOURCE if it wasn't defined yet, by Han-Wen Nienhuys · 10 years ago
  65. e22f76c Set gid as well as uid by Daniel Wagner-Hall · 10 years ago
  66. 2221860 Add a --javac_extdir flag to enable configuring the javac -extdirs flag by Liam Miller-Cushon · 10 years ago
  67. fe76e11 namespace-sandbox: split the main method by Damien Martin-Guillerez · 10 years ago
  68. 717a559 namespace-sandbox: extracted option parsing in a method by Damien Martin-Guillerez · 10 years ago
  69. aabdb67 namespace-sandbox: write "deny" to /proc/self/setgroups by Damien Martin-Guillerez · 10 years ago
  70. cb598ef namespace-sandbox: fix usage string by Damien Martin-Guillerez · 10 years ago
  71. 8102120 namespace-sandbox: extract a file writing function by Damien Martin-Guillerez · 10 years ago
  72. 2ef5ec5 If effective user id != user id, force us to act as the effective user id by Daniel Wagner-Hall · 10 years ago
  73. b5ecdab Make JDK not need tools/jdk/jdk symlinked by Kristina Chodorow · 10 years ago
  74. 91876f0 Make Rule know about the name of the workspace it is in. by Kristina Chodorow · 10 years ago
  75. 523d442 Add default WORKSPACE file for Java rules by Kristina Chodorow · 10 years ago
  76. d08b27f Update from Google. by Han-Wen Nienhuys · 10 years ago