Github/nsjail
1
0
Fork 0
mirror of https://github.com/google/nsjail.git synced 2026-08-30 18:41:30 -07:00
Code Issues Packages Projects Releases Wiki Activity

net: support -t/-u for --splice-only

Browse Source
This commit is contained in:
Robert Swiecki
2026-03-22 01:18:19 +01:00
parent 701c71bb27
commit cb1935bcd0
2 changed files with 10 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
configs/bash-with-fake-geteuid.cfg
View File

@@ -63,8 +63,8 @@ clone_newcgroup: true
user_net {
enable: true
tcp_map_in: "auto"
udp_map_in: "auto"
tcp_map_in: "9999"
udp_map_in: "8888"
tcp_map_out: "22"
udp_map_out: "53"
}

17
net.cc
View File

@@ -252,15 +252,6 @@ static bool spawnPasta(nsj_t* nsj, int pid) {
argv.push_back("--config-net");
}
if (!nsj->njc.user_net().tcp_map_in().empty()) {
argv.push_back("-t");
argv.push_back(nsj->njc.user_net().tcp_map_in().c_str());
}
if (!nsj->njc.user_net().udp_map_in().empty()) {
argv.push_back("-u");
argv.push_back(nsj->njc.user_net().udp_map_in().c_str());
}
if (nsj->njc.user_net().enable_dns()) {
argv.push_back("--dhcp-dns");
}
@@ -318,6 +309,14 @@ static bool spawnPasta(nsj_t* nsj, int pid) {
}
}
if (!nsj->njc.user_net().tcp_map_in().empty()) {
argv.push_back("-t");
argv.push_back(nsj->njc.user_net().tcp_map_in().c_str());
}
if (!nsj->njc.user_net().udp_map_in().empty()) {
argv.push_back("-u");
argv.push_back(nsj->njc.user_net().udp_map_in().c_str());
}
if (!nsj->njc.user_net().tcp_map_out().empty()) {
argv.push_back("-T");
argv.push_back(nsj->njc.user_net().tcp_map_out().c_str());