Skip to content
This repository was archived by the owner on Nov 17, 2024. It is now read-only.
Open
Changes from 1 commit
Commits
Show all changes
24 commits
Select commit Hold shift + click to select a range
8b84b17
Increase default num boxes
wil93 Jan 18, 2016
c231b13
Merge pull request #10 from algorithm-ninja/increase_num_boxes
gollux Jan 18, 2016
a3a2c4d
var_len of default environment rules was not initialized
gollux Jan 22, 2016
ab6ec57
Implemented "--silent" mode
gollux Jan 23, 2016
c228c56
Clean up signal handling
gollux Jan 23, 2016
6d7aa39
Call watchdog timer every 100 ms
gollux Jan 24, 2016
8af30e7
Changed default box location to /var/local/lib/isolate/
gollux Jan 24, 2016
4693333
Makefile: Do not use "asciidoc -D" when building man pages
gollux Jan 24, 2016
ce9dad0
Fixed race condition in make_dir()
gollux Jan 24, 2016
6b46017
Add a LICENSE file.
gollux Jan 24, 2016
c8b0eef
Source split to several files
gollux Jan 24, 2016
4d364d5
Compile-time configuration moved to a run-time config file
gollux Jan 24, 2016
cb04630
Update the manual page to reflect recent changes
gollux Jan 24, 2016
450096d
Released as version 1.2
gollux Jan 24, 2016
8fc6594
Man page: Do not refer to a non-existent section
gollux Aug 16, 2016
e7f421b
Makefile: Enable prototype warnings
gollux Aug 16, 2016
9fa5760
cgroups: Fix inheritance of cpusets
gollux Aug 16, 2016
a01a65e
Added per-box configuration of CPU and NUMA node sets
gollux Aug 16, 2016
a2590eb
Added a possibility to choose a parent cgroup
gollux Aug 16, 2016
3bf44c4
Released as version 1.3
gollux Oct 10, 2016
e3c1368
Added f to short_opts
hermanzdosilovic Oct 22, 2016
0ede685
Merge pull request #18 from hermanzdosilovic/file-size
gollux Oct 24, 2016
7f55e36
Cosmetic: Options should be sorted
gollux Oct 24, 2016
424e3a6
Makefile: remove exec permission for config and manpage files
seirl Mar 3, 2017
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Update the manual page to reflect recent changes
  • Loading branch information
gollux committed Jan 24, 2016
commit cb04630b4ad4a3a1add6eb052bf2b46fb65e4872
9 changes: 4 additions & 5 deletions isolate.1.txt
Original file line number Diff line number Diff line change
Expand Up @@ -266,14 +266,13 @@ you should also enable the swap controller (+CONFIG_MEMCG_SWAP+).

Debian 7.x and newer require enabling the memory and swap cgroup controllers by
adding the parameters "cgroup_enable=memory swapaccount=1" to the kernel
command-line, which can be set using GRUB_CMDLINE_LINUX_DEFAULT in
command-line, which can be set using +GRUB_CMDLINE_LINUX_DEFAULT+ in
/etc/default/grub.

Isolate is designed to run setuid to root. The sub-process inside the sandbox
then switches to a non-privileged user ID (different for each *--box-id*).
The range of UIDs available and several filesystem paths are embedded in the
isolate's binary during compilation; please see +config.h+ in the source
tree for description.
The range of UIDs available and several filesystem paths are set in a configuration
file, by default located in /usr/local/etc/isolate.

Before you run isolate with control groups, you need to ensure that the cgroup
filesystem is enabled and mounted. Most modern Linux distributions already
Expand All @@ -298,4 +297,4 @@ LICENSE
-------
Isolate was written by Martin Mares and Bernard Blackham.
It can be distributed and used under the terms of the GNU
General Public License version 2.
General Public License version 2 or any later version.