crosvm/jail
Keiichi Watanabe f67ee911d9 devices: fs: Allow running virito-fs without root
We usually requires the root permission or sandboxing to run
virtiofs to do bind-mount and pivot_root inside
of a mount namespace.

This CL allows non-root user wherein "root_dir" defaults to the
path provided via "--shared-dir". This override is currently
enabled when "fs_runtime_ugid_map" feature is enabled.

Bug=b:340940950
Test: Launch Terminal App with virtiofs enabled.
Verify virtiofs mounts on guest and run basic I/O tests.
Change-Id: Icc0065cb11dd919f473e5d3ee994e7f8d679ecd0
Signed-off-by: Akilesh Kailash <akailash@google.com>
Reviewed-on: https://chromium-review.googlesource.com/c/crosvm/crosvm/+/5945445
Reviewed-by: Keiichi Watanabe <keiichiw@chromium.org>
2024-10-26 00:21:18 +00:00
..
seccomp vhost_user: add wait4 seccomp policy for vhost_user device 2024-10-23 02:52:16 +00:00
src devices: fs: Allow running virito-fs without root 2024-10-26 00:21:18 +00:00
tests base: move fork_process to jail crate 2024-05-22 21:21:59 +00:00
build.rs jail: Compile seccomp policies in parallel 2023-05-25 19:13:12 +00:00
Cargo.toml base: move fork_process to jail crate 2024-05-22 21:21:59 +00:00