config: description
authorRobert Swiecki <robert@swiecki.net>
Sat, 27 May 2017 01:20:10 +0000 (03:20 +0200)
committerRobert Swiecki <robert@swiecki.net>
Sat, 27 May 2017 01:20:10 +0000 (03:20 +0200)
config.pb-c.c
config.pb-c.h
config.proto

index 6dc63302d5b5e014d216524b29a39a039f2bfe3e..bbdb9574ec7364877a901b79199ea0254db1a2ee 100644 (file)
 #endif
 
 #include "config.pb-c.h"
-void nsjail__id_map__init(Nsjail__IdMap * message) {
-       static Nsjail__IdMap init_value = NSJAIL__ID_MAP__INIT;
-       *message = init_value;
+void   nsjail__id_map__init
+                     (Nsjail__IdMap         *message)
+{
+  static Nsjail__IdMap init_value = NSJAIL__ID_MAP__INIT;
+  *message = init_value;
 }
-
-size_t nsjail__id_map__get_packed_size(const Nsjail__IdMap * message) {
-       assert(message->base.descriptor == &nsjail__id_map__descriptor);
-       return protobuf_c_message_get_packed_size((const ProtobufCMessage *)(message));
+size_t nsjail__id_map__get_packed_size
+                     (const Nsjail__IdMap *message)
+{
+  assert(message->base.descriptor == &nsjail__id_map__descriptor);
+  return protobuf_c_message_get_packed_size ((const ProtobufCMessage*)(message));
 }
-
-size_t nsjail__id_map__pack(const Nsjail__IdMap * message, uint8_t * out) {
-       assert(message->base.descriptor == &nsjail__id_map__descriptor);
-       return protobuf_c_message_pack((const ProtobufCMessage *)message, out);
+size_t nsjail__id_map__pack
+                     (const Nsjail__IdMap *message,
+                      uint8_t       *out)
+{
+  assert(message->base.descriptor == &nsjail__id_map__descriptor);
+  return protobuf_c_message_pack ((const ProtobufCMessage*)message, out);
 }
-
-size_t nsjail__id_map__pack_to_buffer(const Nsjail__IdMap * message, ProtobufCBuffer * buffer) {
-       assert(message->base.descriptor == &nsjail__id_map__descriptor);
-       return protobuf_c_message_pack_to_buffer((const ProtobufCMessage *)message, buffer);
+size_t nsjail__id_map__pack_to_buffer
+                     (const Nsjail__IdMap *message,
+                      ProtobufCBuffer *buffer)
+{
+  assert(message->base.descriptor == &nsjail__id_map__descriptor);
+  return protobuf_c_message_pack_to_buffer ((const ProtobufCMessage*)message, buffer);
 }
-
-Nsjail__IdMap *nsjail__id_map__unpack
-    (ProtobufCAllocator * allocator, size_t len, const uint8_t * data) {
-       return (Nsjail__IdMap *)
-           protobuf_c_message_unpack(&nsjail__id_map__descriptor, allocator, len, data);
+Nsjail__IdMap *
+       nsjail__id_map__unpack
+                     (ProtobufCAllocator  *allocator,
+                      size_t               len,
+                      const uint8_t       *data)
+{
+  return (Nsjail__IdMap *)
+     protobuf_c_message_unpack (&nsjail__id_map__descriptor,
+                                allocator, len, data);
 }
-
-void nsjail__id_map__free_unpacked(Nsjail__IdMap * message, ProtobufCAllocator * allocator) {
-       assert(message->base.descriptor == &nsjail__id_map__descriptor);
-       protobuf_c_message_free_unpacked((ProtobufCMessage *) message, allocator);
+void   nsjail__id_map__free_unpacked
+                     (Nsjail__IdMap *message,
+                      ProtobufCAllocator *allocator)
+{
+  assert(message->base.descriptor == &nsjail__id_map__descriptor);
+  protobuf_c_message_free_unpacked ((ProtobufCMessage*)message, allocator);
 }
-
-void nsjail__mount_pt__init(Nsjail__MountPt * message) {
-       static Nsjail__MountPt init_value = NSJAIL__MOUNT_PT__INIT;
-       *message = init_value;
+void   nsjail__mount_pt__init
+                     (Nsjail__MountPt         *message)
+{
+  static Nsjail__MountPt init_value = NSJAIL__MOUNT_PT__INIT;
+  *message = init_value;
 }
-
-size_t nsjail__mount_pt__get_packed_size(const Nsjail__MountPt * message) {
-       assert(message->base.descriptor == &nsjail__mount_pt__descriptor);
-       return protobuf_c_message_get_packed_size((const ProtobufCMessage *)(message));
+size_t nsjail__mount_pt__get_packed_size
+                     (const Nsjail__MountPt *message)
+{
+  assert(message->base.descriptor == &nsjail__mount_pt__descriptor);
+  return protobuf_c_message_get_packed_size ((const ProtobufCMessage*)(message));
 }
-
-size_t nsjail__mount_pt__pack(const Nsjail__MountPt * message, uint8_t * out) {
-       assert(message->base.descriptor == &nsjail__mount_pt__descriptor);
-       return protobuf_c_message_pack((const ProtobufCMessage *)message, out);
+size_t nsjail__mount_pt__pack
+                     (const Nsjail__MountPt *message,
+                      uint8_t       *out)
+{
+  assert(message->base.descriptor == &nsjail__mount_pt__descriptor);
+  return protobuf_c_message_pack ((const ProtobufCMessage*)message, out);
 }
-
-size_t nsjail__mount_pt__pack_to_buffer(const Nsjail__MountPt * message, ProtobufCBuffer * buffer) {
-       assert(message->base.descriptor == &nsjail__mount_pt__descriptor);
-       return protobuf_c_message_pack_to_buffer((const ProtobufCMessage *)message, buffer);
+size_t nsjail__mount_pt__pack_to_buffer
+                     (const Nsjail__MountPt *message,
+                      ProtobufCBuffer *buffer)
+{
+  assert(message->base.descriptor == &nsjail__mount_pt__descriptor);
+  return protobuf_c_message_pack_to_buffer ((const ProtobufCMessage*)message, buffer);
 }
-
-Nsjail__MountPt *nsjail__mount_pt__unpack
-    (ProtobufCAllocator * allocator, size_t len, const uint8_t * data) {
-       return (Nsjail__MountPt *)
-           protobuf_c_message_unpack(&nsjail__mount_pt__descriptor, allocator, len, data);
+Nsjail__MountPt *
+       nsjail__mount_pt__unpack
+                     (ProtobufCAllocator  *allocator,
+                      size_t               len,
+                      const uint8_t       *data)
+{
+  return (Nsjail__MountPt *)
+     protobuf_c_message_unpack (&nsjail__mount_pt__descriptor,
+                                allocator, len, data);
 }
-
-void nsjail__mount_pt__free_unpacked(Nsjail__MountPt * message, ProtobufCAllocator * allocator) {
-       assert(message->base.descriptor == &nsjail__mount_pt__descriptor);
-       protobuf_c_message_free_unpacked((ProtobufCMessage *) message, allocator);
+void   nsjail__mount_pt__free_unpacked
+                     (Nsjail__MountPt *message,
+                      ProtobufCAllocator *allocator)
+{
+  assert(message->base.descriptor == &nsjail__mount_pt__descriptor);
+  protobuf_c_message_free_unpacked ((ProtobufCMessage*)message, allocator);
 }
-
-void nsjail__exe__init(Nsjail__Exe * message) {
-       static Nsjail__Exe init_value = NSJAIL__EXE__INIT;
-       *message = init_value;
+void   nsjail__exe__init
+                     (Nsjail__Exe         *message)
+{
+  static Nsjail__Exe init_value = NSJAIL__EXE__INIT;
+  *message = init_value;
 }
-
-size_t nsjail__exe__get_packed_size(const Nsjail__Exe * message) {
-       assert(message->base.descriptor == &nsjail__exe__descriptor);
-       return protobuf_c_message_get_packed_size((const ProtobufCMessage *)(message));
+size_t nsjail__exe__get_packed_size
+                     (const Nsjail__Exe *message)
+{
+  assert(message->base.descriptor == &nsjail__exe__descriptor);
+  return protobuf_c_message_get_packed_size ((const ProtobufCMessage*)(message));
 }
-
-size_t nsjail__exe__pack(const Nsjail__Exe * message, uint8_t * out) {
-       assert(message->base.descriptor == &nsjail__exe__descriptor);
-       return protobuf_c_message_pack((const ProtobufCMessage *)message, out);
+size_t nsjail__exe__pack
+                     (const Nsjail__Exe *message,
+                      uint8_t       *out)
+{
+  assert(message->base.descriptor == &nsjail__exe__descriptor);
+  return protobuf_c_message_pack ((const ProtobufCMessage*)message, out);
 }
-
-size_t nsjail__exe__pack_to_buffer(const Nsjail__Exe * message, ProtobufCBuffer * buffer) {
-       assert(message->base.descriptor == &nsjail__exe__descriptor);
-       return protobuf_c_message_pack_to_buffer((const ProtobufCMessage *)message, buffer);
+size_t nsjail__exe__pack_to_buffer
+                     (const Nsjail__Exe *message,
+                      ProtobufCBuffer *buffer)
+{
+  assert(message->base.descriptor == &nsjail__exe__descriptor);
+  return protobuf_c_message_pack_to_buffer ((const ProtobufCMessage*)message, buffer);
 }
-
-Nsjail__Exe *nsjail__exe__unpack(ProtobufCAllocator * allocator, size_t len, const uint8_t * data) {
-       return (Nsjail__Exe *)
-           protobuf_c_message_unpack(&nsjail__exe__descriptor, allocator, len, data);
+Nsjail__Exe *
+       nsjail__exe__unpack
+                     (ProtobufCAllocator  *allocator,
+                      size_t               len,
+                      const uint8_t       *data)
+{
+  return (Nsjail__Exe *)
+     protobuf_c_message_unpack (&nsjail__exe__descriptor,
+                                allocator, len, data);
 }
-
-void nsjail__exe__free_unpacked(Nsjail__Exe * message, ProtobufCAllocator * allocator) {
-       assert(message->base.descriptor == &nsjail__exe__descriptor);
-       protobuf_c_message_free_unpacked((ProtobufCMessage *) message, allocator);
+void   nsjail__exe__free_unpacked
+                     (Nsjail__Exe *message,
+                      ProtobufCAllocator *allocator)
+{
+  assert(message->base.descriptor == &nsjail__exe__descriptor);
+  protobuf_c_message_free_unpacked ((ProtobufCMessage*)message, allocator);
 }
-
-void nsjail__ns_jail_config__init(Nsjail__NsJailConfig * message) {
-       static Nsjail__NsJailConfig init_value = NSJAIL__NS_JAIL_CONFIG__INIT;
-       *message = init_value;
+void   nsjail__ns_jail_config__init
+                     (Nsjail__NsJailConfig         *message)
+{
+  static Nsjail__NsJailConfig init_value = NSJAIL__NS_JAIL_CONFIG__INIT;
+  *message = init_value;
 }
-
-size_t nsjail__ns_jail_config__get_packed_size(const Nsjail__NsJailConfig * message) {
-       assert(message->base.descriptor == &nsjail__ns_jail_config__descriptor);
-       return protobuf_c_message_get_packed_size((const ProtobufCMessage *)(message));
+size_t nsjail__ns_jail_config__get_packed_size
+                     (const Nsjail__NsJailConfig *message)
+{
+  assert(message->base.descriptor == &nsjail__ns_jail_config__descriptor);
+  return protobuf_c_message_get_packed_size ((const ProtobufCMessage*)(message));
 }
-
-size_t nsjail__ns_jail_config__pack(const Nsjail__NsJailConfig * message, uint8_t * out) {
-       assert(message->base.descriptor == &nsjail__ns_jail_config__descriptor);
-       return protobuf_c_message_pack((const ProtobufCMessage *)message, out);
+size_t nsjail__ns_jail_config__pack
+                     (const Nsjail__NsJailConfig *message,
+                      uint8_t       *out)
+{
+  assert(message->base.descriptor == &nsjail__ns_jail_config__descriptor);
+  return protobuf_c_message_pack ((const ProtobufCMessage*)message, out);
 }
-
 size_t nsjail__ns_jail_config__pack_to_buffer
-    (const Nsjail__NsJailConfig * message, ProtobufCBuffer * buffer) {
-       assert(message->base.descriptor == &nsjail__ns_jail_config__descriptor);
-       return protobuf_c_message_pack_to_buffer((const ProtobufCMessage *)message, buffer);
+                     (const Nsjail__NsJailConfig *message,
+                      ProtobufCBuffer *buffer)
+{
+  assert(message->base.descriptor == &nsjail__ns_jail_config__descriptor);
+  return protobuf_c_message_pack_to_buffer ((const ProtobufCMessage*)message, buffer);
 }
-
-Nsjail__NsJailConfig *nsjail__ns_jail_config__unpack
-    (ProtobufCAllocator * allocator, size_t len, const uint8_t * data) {
-       return (Nsjail__NsJailConfig *)
-           protobuf_c_message_unpack(&nsjail__ns_jail_config__descriptor, allocator, len, data);
+Nsjail__NsJailConfig *
+       nsjail__ns_jail_config__unpack
+                     (ProtobufCAllocator  *allocator,
+                      size_t               len,
+                      const uint8_t       *data)
+{
+  return (Nsjail__NsJailConfig *)
+     protobuf_c_message_unpack (&nsjail__ns_jail_config__descriptor,
+                                allocator, len, data);
 }
-
-void nsjail__ns_jail_config__free_unpacked
-    (Nsjail__NsJailConfig * message, ProtobufCAllocator * allocator) {
-       assert(message->base.descriptor == &nsjail__ns_jail_config__descriptor);
-       protobuf_c_message_free_unpacked((ProtobufCMessage *) message, allocator);
+void   nsjail__ns_jail_config__free_unpacked
+                     (Nsjail__NsJailConfig *message,
+                      ProtobufCAllocator *allocator)
+{
+  assert(message->base.descriptor == &nsjail__ns_jail_config__descriptor);
+  protobuf_c_message_free_unpacked ((ProtobufCMessage*)message, allocator);
 }
-
 char nsjail__id_map__inside_id__default_value[] = "";
 char nsjail__id_map__outside_id__default_value[] = "";
 static const uint32_t nsjail__id_map__count__default_value = 1u;
 static const protobuf_c_boolean nsjail__id_map__use_newidmap__default_value = 0;
-static const ProtobufCFieldDescriptor nsjail__id_map__field_descriptors[4] = {
-       {
-        "inside_id",
-        1,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__IdMap, inside_id),
-        NULL,
-        &nsjail__id_map__inside_id__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "outside_id",
-        2,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__IdMap, outside_id),
-        NULL,
-        &nsjail__id_map__outside_id__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "count",
-        3,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_UINT32,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__IdMap, count),
-        NULL,
-        &nsjail__id_map__count__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "use_newidmap",
-        4,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__IdMap, use_newidmap),
-        NULL,
-        &nsjail__id_map__use_newidmap__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
+static const ProtobufCFieldDescriptor nsjail__id_map__field_descriptors[4] =
+{
+  {
+    "inside_id",
+    1,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__IdMap, inside_id),
+    NULL,
+    &nsjail__id_map__inside_id__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "outside_id",
+    2,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__IdMap, outside_id),
+    NULL,
+    &nsjail__id_map__outside_id__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "count",
+    3,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_UINT32,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__IdMap, count),
+    NULL,
+    &nsjail__id_map__count__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "use_newidmap",
+    4,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__IdMap, use_newidmap),
+    NULL,
+    &nsjail__id_map__use_newidmap__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
 };
-
 static const unsigned nsjail__id_map__field_indices_by_name[] = {
-       2,                      /* field[2] = count */
-       0,                      /* field[0] = inside_id */
-       1,                      /* field[1] = outside_id */
-       3,                      /* field[3] = use_newidmap */
+  2,   /* field[2] = count */
+  0,   /* field[0] = inside_id */
+  1,   /* field[1] = outside_id */
+  3,   /* field[3] = use_newidmap */
 };
-
-static const ProtobufCIntRange nsjail__id_map__number_ranges[1 + 1] = {
-       {1, 0},
-       {0, 4}
+static const ProtobufCIntRange nsjail__id_map__number_ranges[1 + 1] =
+{
+  { 1, 0 },
+  { 0, 4 }
 };
-
-const ProtobufCMessageDescriptor nsjail__id_map__descriptor = {
-       PROTOBUF_C__MESSAGE_DESCRIPTOR_MAGIC,
-       "nsjail.IdMap",
-       "IdMap",
-       "Nsjail__IdMap",
-       "nsjail",
-       sizeof(Nsjail__IdMap),
-       4,
-       nsjail__id_map__field_descriptors,
-       nsjail__id_map__field_indices_by_name,
-       1, nsjail__id_map__number_ranges,
-       (ProtobufCMessageInit) nsjail__id_map__init,
-       NULL, NULL, NULL        /* reserved[123] */
+const ProtobufCMessageDescriptor nsjail__id_map__descriptor =
+{
+  PROTOBUF_C__MESSAGE_DESCRIPTOR_MAGIC,
+  "nsjail.IdMap",
+  "IdMap",
+  "Nsjail__IdMap",
+  "nsjail",
+  sizeof(Nsjail__IdMap),
+  4,
+  nsjail__id_map__field_descriptors,
+  nsjail__id_map__field_indices_by_name,
+  1,  nsjail__id_map__number_ranges,
+  (ProtobufCMessageInit) nsjail__id_map__init,
+  NULL,NULL,NULL    /* reserved[123] */
 };
-
 char nsjail__mount_pt__options__default_value[] = "";
 static const protobuf_c_boolean nsjail__mount_pt__is_bind__default_value = 0;
 static const protobuf_c_boolean nsjail__mount_pt__is_ro__default_value = 0;
-static const ProtobufCFieldDescriptor nsjail__mount_pt__field_descriptors[7] = {
-       {
-        "src",
-        1,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__MountPt, src),
-        NULL,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "dst",
-        2,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__MountPt, dst),
-        NULL,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "fstype",
-        3,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__MountPt, fstype),
-        NULL,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "options",
-        4,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__MountPt, options),
-        NULL,
-        &nsjail__mount_pt__options__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "is_bind",
-        5,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__MountPt, is_bind),
-        NULL,
-        &nsjail__mount_pt__is_bind__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "is_ro",
-        6,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__MountPt, is_ro),
-        NULL,
-        &nsjail__mount_pt__is_ro__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "is_dir",
-        7,
-        PROTOBUF_C_LABEL_OPTIONAL,
-        PROTOBUF_C_TYPE_BOOL,
-        offsetof(Nsjail__MountPt, has_is_dir),
-        offsetof(Nsjail__MountPt, is_dir),
-        NULL,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
+static const ProtobufCFieldDescriptor nsjail__mount_pt__field_descriptors[7] =
+{
+  {
+    "src",
+    1,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__MountPt, src),
+    NULL,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "dst",
+    2,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__MountPt, dst),
+    NULL,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "fstype",
+    3,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__MountPt, fstype),
+    NULL,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "options",
+    4,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__MountPt, options),
+    NULL,
+    &nsjail__mount_pt__options__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "is_bind",
+    5,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__MountPt, is_bind),
+    NULL,
+    &nsjail__mount_pt__is_bind__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "is_ro",
+    6,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__MountPt, is_ro),
+    NULL,
+    &nsjail__mount_pt__is_ro__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "is_dir",
+    7,
+    PROTOBUF_C_LABEL_OPTIONAL,
+    PROTOBUF_C_TYPE_BOOL,
+    offsetof(Nsjail__MountPt, has_is_dir),
+    offsetof(Nsjail__MountPt, is_dir),
+    NULL,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
 };
-
 static const unsigned nsjail__mount_pt__field_indices_by_name[] = {
-       1,                      /* field[1] = dst */
-       2,                      /* field[2] = fstype */
-       4,                      /* field[4] = is_bind */
-       6,                      /* field[6] = is_dir */
-       5,                      /* field[5] = is_ro */
-       3,                      /* field[3] = options */
-       0,                      /* field[0] = src */
+  1,   /* field[1] = dst */
+  2,   /* field[2] = fstype */
+  4,   /* field[4] = is_bind */
+  6,   /* field[6] = is_dir */
+  5,   /* field[5] = is_ro */
+  3,   /* field[3] = options */
+  0,   /* field[0] = src */
 };
-
-static const ProtobufCIntRange nsjail__mount_pt__number_ranges[1 + 1] = {
-       {1, 0},
-       {0, 7}
+static const ProtobufCIntRange nsjail__mount_pt__number_ranges[1 + 1] =
+{
+  { 1, 0 },
+  { 0, 7 }
 };
-
-const ProtobufCMessageDescriptor nsjail__mount_pt__descriptor = {
-       PROTOBUF_C__MESSAGE_DESCRIPTOR_MAGIC,
-       "nsjail.MountPt",
-       "MountPt",
-       "Nsjail__MountPt",
-       "nsjail",
-       sizeof(Nsjail__MountPt),
-       7,
-       nsjail__mount_pt__field_descriptors,
-       nsjail__mount_pt__field_indices_by_name,
-       1, nsjail__mount_pt__number_ranges,
-       (ProtobufCMessageInit) nsjail__mount_pt__init,
-       NULL, NULL, NULL        /* reserved[123] */
+const ProtobufCMessageDescriptor nsjail__mount_pt__descriptor =
+{
+  PROTOBUF_C__MESSAGE_DESCRIPTOR_MAGIC,
+  "nsjail.MountPt",
+  "MountPt",
+  "Nsjail__MountPt",
+  "nsjail",
+  sizeof(Nsjail__MountPt),
+  7,
+  nsjail__mount_pt__field_descriptors,
+  nsjail__mount_pt__field_indices_by_name,
+  1,  nsjail__mount_pt__number_ranges,
+  (ProtobufCMessageInit) nsjail__mount_pt__init,
+  NULL,NULL,NULL    /* reserved[123] */
 };
-
-static const ProtobufCFieldDescriptor nsjail__exe__field_descriptors[2] = {
-       {
-        "path",
-        1,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__Exe, path),
-        NULL,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "arg",
-        2,
-        PROTOBUF_C_LABEL_REPEATED,
-        PROTOBUF_C_TYPE_STRING,
-        offsetof(Nsjail__Exe, n_arg),
-        offsetof(Nsjail__Exe, arg),
-        NULL,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
+static const ProtobufCFieldDescriptor nsjail__exe__field_descriptors[2] =
+{
+  {
+    "path",
+    1,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__Exe, path),
+    NULL,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "arg",
+    2,
+    PROTOBUF_C_LABEL_REPEATED,
+    PROTOBUF_C_TYPE_STRING,
+    offsetof(Nsjail__Exe, n_arg),
+    offsetof(Nsjail__Exe, arg),
+    NULL,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
 };
-
 static const unsigned nsjail__exe__field_indices_by_name[] = {
-       1,                      /* field[1] = arg */
-       0,                      /* field[0] = path */
+  1,   /* field[1] = arg */
+  0,   /* field[0] = path */
 };
-
-static const ProtobufCIntRange nsjail__exe__number_ranges[1 + 1] = {
-       {1, 0},
-       {0, 2}
+static const ProtobufCIntRange nsjail__exe__number_ranges[1 + 1] =
+{
+  { 1, 0 },
+  { 0, 2 }
 };
-
-const ProtobufCMessageDescriptor nsjail__exe__descriptor = {
-       PROTOBUF_C__MESSAGE_DESCRIPTOR_MAGIC,
-       "nsjail.Exe",
-       "Exe",
-       "Nsjail__Exe",
-       "nsjail",
-       sizeof(Nsjail__Exe),
-       2,
-       nsjail__exe__field_descriptors,
-       nsjail__exe__field_indices_by_name,
-       1, nsjail__exe__number_ranges,
-       (ProtobufCMessageInit) nsjail__exe__init,
-       NULL, NULL, NULL        /* reserved[123] */
+const ProtobufCMessageDescriptor nsjail__exe__descriptor =
+{
+  PROTOBUF_C__MESSAGE_DESCRIPTOR_MAGIC,
+  "nsjail.Exe",
+  "Exe",
+  "Nsjail__Exe",
+  "nsjail",
+  sizeof(Nsjail__Exe),
+  2,
+  nsjail__exe__field_descriptors,
+  nsjail__exe__field_indices_by_name,
+  1,  nsjail__exe__number_ranges,
+  (ProtobufCMessageInit) nsjail__exe__init,
+  NULL,NULL,NULL    /* reserved[123] */
 };
-
 char nsjail__ns_jail_config__hostname__default_value[] = "NSJAIL";
 char nsjail__ns_jail_config__cwd__default_value[] = "/";
 char nsjail__ns_jail_config__bindhost__default_value[] = "::";
@@ -412,14 +456,11 @@ static const uint64_t nsjail__ns_jail_config__rlimit_core__default_value = 0ull;
 static const uint64_t nsjail__ns_jail_config__rlimit_cpu__default_value = 600ull;
 static const uint64_t nsjail__ns_jail_config__rlimit_fsize__default_value = 1ull;
 static const uint64_t nsjail__ns_jail_config__rlimit_nofile__default_value = 32ull;
-static const protobuf_c_boolean nsjail__ns_jail_config__persona_addr_compat_layout__default_value =
-    0;
+static const protobuf_c_boolean nsjail__ns_jail_config__persona_addr_compat_layout__default_value = 0;
 static const protobuf_c_boolean nsjail__ns_jail_config__persona_mmap_page_zero__default_value = 0;
-static const protobuf_c_boolean nsjail__ns_jail_config__persona_read_implies_exec__default_value =
-    0;
+static const protobuf_c_boolean nsjail__ns_jail_config__persona_read_implies_exec__default_value = 0;
 static const protobuf_c_boolean nsjail__ns_jail_config__persona_addr_limit_3gb__default_value = 0;
-static const protobuf_c_boolean nsjail__ns_jail_config__persona_addr_no_randomize__default_value =
-    0;
+static const protobuf_c_boolean nsjail__ns_jail_config__persona_addr_no_randomize__default_value = 0;
 static const protobuf_c_boolean nsjail__ns_jail_config__clone_newnet__default_value = 1;
 static const protobuf_c_boolean nsjail__ns_jail_config__clone_newuser__default_value = 1;
 static const protobuf_c_boolean nsjail__ns_jail_config__clone_newns__default_value = 1;
@@ -431,812 +472,810 @@ static const protobuf_c_boolean nsjail__ns_jail_config__mount_proc__default_valu
 static const uint64_t nsjail__ns_jail_config__cgroup_mem_max__default_value = 0ull;
 static const uint64_t nsjail__ns_jail_config__cgroup_pids_max__default_value = 0ull;
 static const protobuf_c_boolean nsjail__ns_jail_config__iface_no_lo__default_value = 0;
-static const ProtobufCFieldDescriptor nsjail__ns_jail_config__field_descriptors[55] = {
-       {
-        "mode",
-        1,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_ENUM,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, mode),
-        &nsjail__mode__descriptor,
-        &nsjail__ns_jail_config__mode__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "chroot_dir",
-        2,
-        PROTOBUF_C_LABEL_OPTIONAL,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, chroot_dir),
-        NULL,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "is_root_rw",
-        3,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, is_root_rw),
-        NULL,
-        &nsjail__ns_jail_config__is_root_rw__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "hostname",
-        6,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, hostname),
-        NULL,
-        &nsjail__ns_jail_config__hostname__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "cwd",
-        7,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, cwd),
-        NULL,
-        &nsjail__ns_jail_config__cwd__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "port",
-        8,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_UINT32,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, port),
-        NULL,
-        &nsjail__ns_jail_config__port__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "bindhost",
-        9,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, bindhost),
-        NULL,
-        &nsjail__ns_jail_config__bindhost__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "max_conns_per_ip",
-        10,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_UINT32,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, max_conns_per_ip),
-        NULL,
-        &nsjail__ns_jail_config__max_conns_per_ip__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "time_limit",
-        11,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_UINT32,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, time_limit),
-        NULL,
-        &nsjail__ns_jail_config__time_limit__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "daemon",
-        12,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, daemon),
-        NULL,
-        &nsjail__ns_jail_config__daemon__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "log_file",
-        13,
-        PROTOBUF_C_LABEL_OPTIONAL,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, log_file),
-        NULL,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "log_level",
-        14,
-        PROTOBUF_C_LABEL_OPTIONAL,
-        PROTOBUF_C_TYPE_ENUM,
-        offsetof(Nsjail__NsJailConfig, has_log_level),
-        offsetof(Nsjail__NsJailConfig, log_level),
-        &nsjail__log_level__descriptor,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "keep_env",
-        15,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, keep_env),
-        NULL,
-        &nsjail__ns_jail_config__keep_env__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "silent",
-        16,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, silent),
-        NULL,
-        &nsjail__ns_jail_config__silent__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "skip_setsid",
-        17,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, skip_setsid),
-        NULL,
-        &nsjail__ns_jail_config__skip_setsid__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "pass_fd",
-        18,
-        PROTOBUF_C_LABEL_REPEATED,
-        PROTOBUF_C_TYPE_INT32,
-        offsetof(Nsjail__NsJailConfig, n_pass_fd),
-        offsetof(Nsjail__NsJailConfig, pass_fd),
-        NULL,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "pivot_root_only",
-        19,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, pivot_root_only),
-        NULL,
-        &nsjail__ns_jail_config__pivot_root_only__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "disable_no_new_privs",
-        20,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, disable_no_new_privs),
-        NULL,
-        &nsjail__ns_jail_config__disable_no_new_privs__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "rlimit_as",
-        21,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_UINT64,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, rlimit_as),
-        NULL,
-        &nsjail__ns_jail_config__rlimit_as__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "rlimit_core",
-        22,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_UINT64,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, rlimit_core),
-        NULL,
-        &nsjail__ns_jail_config__rlimit_core__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "rlimit_cpu",
-        23,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_UINT64,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, rlimit_cpu),
-        NULL,
-        &nsjail__ns_jail_config__rlimit_cpu__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "rlimit_fsize",
-        24,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_UINT64,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, rlimit_fsize),
-        NULL,
-        &nsjail__ns_jail_config__rlimit_fsize__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "rlimit_nofile",
-        25,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_UINT64,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, rlimit_nofile),
-        NULL,
-        &nsjail__ns_jail_config__rlimit_nofile__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "rlimit_nproc",
-        26,
-        PROTOBUF_C_LABEL_OPTIONAL,
-        PROTOBUF_C_TYPE_UINT64,
-        offsetof(Nsjail__NsJailConfig, has_rlimit_nproc),
-        offsetof(Nsjail__NsJailConfig, rlimit_nproc),
-        NULL,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "rlimit_stack",
-        27,
-        PROTOBUF_C_LABEL_OPTIONAL,
-        PROTOBUF_C_TYPE_UINT64,
-        offsetof(Nsjail__NsJailConfig, has_rlimit_stack),
-        offsetof(Nsjail__NsJailConfig, rlimit_stack),
-        NULL,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "persona_addr_compat_layout",
-        28,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, persona_addr_compat_layout),
-        NULL,
-        &nsjail__ns_jail_config__persona_addr_compat_layout__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "persona_mmap_page_zero",
-        29,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, persona_mmap_page_zero),
-        NULL,
-        &nsjail__ns_jail_config__persona_mmap_page_zero__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "persona_read_implies_exec",
-        30,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, persona_read_implies_exec),
-        NULL,
-        &nsjail__ns_jail_config__persona_read_implies_exec__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "persona_addr_limit_3gb",
-        31,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, persona_addr_limit_3gb),
-        NULL,
-        &nsjail__ns_jail_config__persona_addr_limit_3gb__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "persona_addr_no_randomize",
-        32,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, persona_addr_no_randomize),
-        NULL,
-        &nsjail__ns_jail_config__persona_addr_no_randomize__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "clone_newnet",
-        33,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, clone_newnet),
-        NULL,
-        &nsjail__ns_jail_config__clone_newnet__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "clone_newuser",
-        34,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, clone_newuser),
-        NULL,
-        &nsjail__ns_jail_config__clone_newuser__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "clone_newns",
-        35,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, clone_newns),
-        NULL,
-        &nsjail__ns_jail_config__clone_newns__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "clone_newpid",
-        36,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, clone_newpid),
-        NULL,
-        &nsjail__ns_jail_config__clone_newpid__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "clone_newipc",
-        37,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, clone_newipc),
-        NULL,
-        &nsjail__ns_jail_config__clone_newipc__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "clone_newuts",
-        38,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, clone_newuts),
-        NULL,
-        &nsjail__ns_jail_config__clone_newuts__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "clone_newcgroup",
-        39,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, clone_newcgroup),
-        NULL,
-        &nsjail__ns_jail_config__clone_newcgroup__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "uidmap",
-        40,
-        PROTOBUF_C_LABEL_REPEATED,
-        PROTOBUF_C_TYPE_MESSAGE,
-        offsetof(Nsjail__NsJailConfig, n_uidmap),
-        offsetof(Nsjail__NsJailConfig, uidmap),
-        &nsjail__id_map__descriptor,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "gidmap",
-        41,
-        PROTOBUF_C_LABEL_REPEATED,
-        PROTOBUF_C_TYPE_MESSAGE,
-        offsetof(Nsjail__NsJailConfig, n_gidmap),
-        offsetof(Nsjail__NsJailConfig, gidmap),
-        &nsjail__id_map__descriptor,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "mount",
-        42,
-        PROTOBUF_C_LABEL_REPEATED,
-        PROTOBUF_C_TYPE_MESSAGE,
-        offsetof(Nsjail__NsJailConfig, n_mount),
-        offsetof(Nsjail__NsJailConfig, mount),
-        &nsjail__mount_pt__descriptor,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "mount_proc",
-        43,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, mount_proc),
-        NULL,
-        &nsjail__ns_jail_config__mount_proc__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "seccomp_policy_file",
-        44,
-        PROTOBUF_C_LABEL_OPTIONAL,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, seccomp_policy_file),
-        NULL,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "seccomp_string",
-        45,
-        PROTOBUF_C_LABEL_OPTIONAL,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, seccomp_string),
-        NULL,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "cgroup_mem_max",
-        46,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_UINT64,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, cgroup_mem_max),
-        NULL,
-        &nsjail__ns_jail_config__cgroup_mem_max__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "cgroup_mem_mount",
-        47,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, cgroup_mem_mount),
-        NULL,
-        &nsjail__ns_jail_config__cgroup_mem_mount__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "cgroup_mem_parent",
-        48,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, cgroup_mem_parent),
-        NULL,
-        &nsjail__ns_jail_config__cgroup_mem_parent__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "cgroup_pids_max",
-        49,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_UINT64,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, cgroup_pids_max),
-        NULL,
-        &nsjail__ns_jail_config__cgroup_pids_max__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "cgroup_pids_mount",
-        50,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, cgroup_pids_mount),
-        NULL,
-        &nsjail__ns_jail_config__cgroup_pids_mount__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "cgroup_pids_parent",
-        51,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, cgroup_pids_parent),
-        NULL,
-        &nsjail__ns_jail_config__cgroup_pids_parent__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "iface_no_lo",
-        52,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_BOOL,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, iface_no_lo),
-        NULL,
-        &nsjail__ns_jail_config__iface_no_lo__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "macvlan_iface",
-        53,
-        PROTOBUF_C_LABEL_OPTIONAL,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, macvlan_iface),
-        NULL,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "macvlan_vs_ip",
-        54,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, macvlan_vs_ip),
-        NULL,
-        &nsjail__ns_jail_config__macvlan_vs_ip__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "macvlan_vs_nm",
-        55,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, macvlan_vs_nm),
-        NULL,
-        &nsjail__ns_jail_config__macvlan_vs_nm__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "macvlan_vs_gw",
-        56,
-        PROTOBUF_C_LABEL_REQUIRED,
-        PROTOBUF_C_TYPE_STRING,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, macvlan_vs_gw),
-        NULL,
-        &nsjail__ns_jail_config__macvlan_vs_gw__default_value,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
-       {
-        "exec_bin",
-        57,
-        PROTOBUF_C_LABEL_OPTIONAL,
-        PROTOBUF_C_TYPE_MESSAGE,
-        0,                     /* quantifier_offset */
-        offsetof(Nsjail__NsJailConfig, exec_bin),
-        &nsjail__exe__descriptor,
-        NULL,
-        0,                     /* flags */
-        0, NULL, NULL          /* reserved1,reserved2, etc */
-        },
+static const ProtobufCFieldDescriptor nsjail__ns_jail_config__field_descriptors[55] =
+{
+  {
+    "mode",
+    1,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_ENUM,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, mode),
+    &nsjail__mode__descriptor,
+    &nsjail__ns_jail_config__mode__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "chroot_dir",
+    2,
+    PROTOBUF_C_LABEL_OPTIONAL,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, chroot_dir),
+    NULL,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "is_root_rw",
+    3,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, is_root_rw),
+    NULL,
+    &nsjail__ns_jail_config__is_root_rw__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "hostname",
+    6,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, hostname),
+    NULL,
+    &nsjail__ns_jail_config__hostname__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "cwd",
+    7,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, cwd),
+    NULL,
+    &nsjail__ns_jail_config__cwd__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "port",
+    8,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_UINT32,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, port),
+    NULL,
+    &nsjail__ns_jail_config__port__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "bindhost",
+    9,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, bindhost),
+    NULL,
+    &nsjail__ns_jail_config__bindhost__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "max_conns_per_ip",
+    10,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_UINT32,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, max_conns_per_ip),
+    NULL,
+    &nsjail__ns_jail_config__max_conns_per_ip__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "time_limit",
+    11,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_UINT32,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, time_limit),
+    NULL,
+    &nsjail__ns_jail_config__time_limit__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "daemon",
+    12,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, daemon),
+    NULL,
+    &nsjail__ns_jail_config__daemon__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "log_file",
+    13,
+    PROTOBUF_C_LABEL_OPTIONAL,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, log_file),
+    NULL,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "log_level",
+    14,
+    PROTOBUF_C_LABEL_OPTIONAL,
+    PROTOBUF_C_TYPE_ENUM,
+    offsetof(Nsjail__NsJailConfig, has_log_level),
+    offsetof(Nsjail__NsJailConfig, log_level),
+    &nsjail__log_level__descriptor,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "keep_env",
+    15,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, keep_env),
+    NULL,
+    &nsjail__ns_jail_config__keep_env__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "silent",
+    16,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, silent),
+    NULL,
+    &nsjail__ns_jail_config__silent__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "skip_setsid",
+    17,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, skip_setsid),
+    NULL,
+    &nsjail__ns_jail_config__skip_setsid__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "pass_fd",
+    18,
+    PROTOBUF_C_LABEL_REPEATED,
+    PROTOBUF_C_TYPE_INT32,
+    offsetof(Nsjail__NsJailConfig, n_pass_fd),
+    offsetof(Nsjail__NsJailConfig, pass_fd),
+    NULL,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "pivot_root_only",
+    19,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, pivot_root_only),
+    NULL,
+    &nsjail__ns_jail_config__pivot_root_only__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "disable_no_new_privs",
+    20,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, disable_no_new_privs),
+    NULL,
+    &nsjail__ns_jail_config__disable_no_new_privs__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "rlimit_as",
+    21,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_UINT64,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, rlimit_as),
+    NULL,
+    &nsjail__ns_jail_config__rlimit_as__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "rlimit_core",
+    22,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_UINT64,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, rlimit_core),
+    NULL,
+    &nsjail__ns_jail_config__rlimit_core__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "rlimit_cpu",
+    23,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_UINT64,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, rlimit_cpu),
+    NULL,
+    &nsjail__ns_jail_config__rlimit_cpu__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "rlimit_fsize",
+    24,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_UINT64,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, rlimit_fsize),
+    NULL,
+    &nsjail__ns_jail_config__rlimit_fsize__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "rlimit_nofile",
+    25,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_UINT64,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, rlimit_nofile),
+    NULL,
+    &nsjail__ns_jail_config__rlimit_nofile__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "rlimit_nproc",
+    26,
+    PROTOBUF_C_LABEL_OPTIONAL,
+    PROTOBUF_C_TYPE_UINT64,
+    offsetof(Nsjail__NsJailConfig, has_rlimit_nproc),
+    offsetof(Nsjail__NsJailConfig, rlimit_nproc),
+    NULL,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "rlimit_stack",
+    27,
+    PROTOBUF_C_LABEL_OPTIONAL,
+    PROTOBUF_C_TYPE_UINT64,
+    offsetof(Nsjail__NsJailConfig, has_rlimit_stack),
+    offsetof(Nsjail__NsJailConfig, rlimit_stack),
+    NULL,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "persona_addr_compat_layout",
+    28,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, persona_addr_compat_layout),
+    NULL,
+    &nsjail__ns_jail_config__persona_addr_compat_layout__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "persona_mmap_page_zero",
+    29,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, persona_mmap_page_zero),
+    NULL,
+    &nsjail__ns_jail_config__persona_mmap_page_zero__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "persona_read_implies_exec",
+    30,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, persona_read_implies_exec),
+    NULL,
+    &nsjail__ns_jail_config__persona_read_implies_exec__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "persona_addr_limit_3gb",
+    31,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, persona_addr_limit_3gb),
+    NULL,
+    &nsjail__ns_jail_config__persona_addr_limit_3gb__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "persona_addr_no_randomize",
+    32,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, persona_addr_no_randomize),
+    NULL,
+    &nsjail__ns_jail_config__persona_addr_no_randomize__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "clone_newnet",
+    33,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, clone_newnet),
+    NULL,
+    &nsjail__ns_jail_config__clone_newnet__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "clone_newuser",
+    34,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, clone_newuser),
+    NULL,
+    &nsjail__ns_jail_config__clone_newuser__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "clone_newns",
+    35,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, clone_newns),
+    NULL,
+    &nsjail__ns_jail_config__clone_newns__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "clone_newpid",
+    36,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, clone_newpid),
+    NULL,
+    &nsjail__ns_jail_config__clone_newpid__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "clone_newipc",
+    37,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, clone_newipc),
+    NULL,
+    &nsjail__ns_jail_config__clone_newipc__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "clone_newuts",
+    38,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, clone_newuts),
+    NULL,
+    &nsjail__ns_jail_config__clone_newuts__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "clone_newcgroup",
+    39,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, clone_newcgroup),
+    NULL,
+    &nsjail__ns_jail_config__clone_newcgroup__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "uidmap",
+    40,
+    PROTOBUF_C_LABEL_REPEATED,
+    PROTOBUF_C_TYPE_MESSAGE,
+    offsetof(Nsjail__NsJailConfig, n_uidmap),
+    offsetof(Nsjail__NsJailConfig, uidmap),
+    &nsjail__id_map__descriptor,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "gidmap",
+    41,
+    PROTOBUF_C_LABEL_REPEATED,
+    PROTOBUF_C_TYPE_MESSAGE,
+    offsetof(Nsjail__NsJailConfig, n_gidmap),
+    offsetof(Nsjail__NsJailConfig, gidmap),
+    &nsjail__id_map__descriptor,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "mount",
+    42,
+    PROTOBUF_C_LABEL_REPEATED,
+    PROTOBUF_C_TYPE_MESSAGE,
+    offsetof(Nsjail__NsJailConfig, n_mount),
+    offsetof(Nsjail__NsJailConfig, mount),
+    &nsjail__mount_pt__descriptor,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "mount_proc",
+    43,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, mount_proc),
+    NULL,
+    &nsjail__ns_jail_config__mount_proc__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "seccomp_policy_file",
+    44,
+    PROTOBUF_C_LABEL_OPTIONAL,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, seccomp_policy_file),
+    NULL,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "seccomp_string",
+    45,
+    PROTOBUF_C_LABEL_OPTIONAL,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, seccomp_string),
+    NULL,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "cgroup_mem_max",
+    46,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_UINT64,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, cgroup_mem_max),
+    NULL,
+    &nsjail__ns_jail_config__cgroup_mem_max__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "cgroup_mem_mount",
+    47,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, cgroup_mem_mount),
+    NULL,
+    &nsjail__ns_jail_config__cgroup_mem_mount__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "cgroup_mem_parent",
+    48,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, cgroup_mem_parent),
+    NULL,
+    &nsjail__ns_jail_config__cgroup_mem_parent__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "cgroup_pids_max",
+    49,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_UINT64,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, cgroup_pids_max),
+    NULL,
+    &nsjail__ns_jail_config__cgroup_pids_max__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "cgroup_pids_mount",
+    50,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, cgroup_pids_mount),
+    NULL,
+    &nsjail__ns_jail_config__cgroup_pids_mount__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "cgroup_pids_parent",
+    51,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, cgroup_pids_parent),
+    NULL,
+    &nsjail__ns_jail_config__cgroup_pids_parent__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "iface_no_lo",
+    52,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_BOOL,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, iface_no_lo),
+    NULL,
+    &nsjail__ns_jail_config__iface_no_lo__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "macvlan_iface",
+    53,
+    PROTOBUF_C_LABEL_OPTIONAL,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, macvlan_iface),
+    NULL,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "macvlan_vs_ip",
+    54,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, macvlan_vs_ip),
+    NULL,
+    &nsjail__ns_jail_config__macvlan_vs_ip__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "macvlan_vs_nm",
+    55,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, macvlan_vs_nm),
+    NULL,
+    &nsjail__ns_jail_config__macvlan_vs_nm__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "macvlan_vs_gw",
+    56,
+    PROTOBUF_C_LABEL_REQUIRED,
+    PROTOBUF_C_TYPE_STRING,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, macvlan_vs_gw),
+    NULL,
+    &nsjail__ns_jail_config__macvlan_vs_gw__default_value,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
+  {
+    "exec_bin",
+    57,
+    PROTOBUF_C_LABEL_OPTIONAL,
+    PROTOBUF_C_TYPE_MESSAGE,
+    0,   /* quantifier_offset */
+    offsetof(Nsjail__NsJailConfig, exec_bin),
+    &nsjail__exe__descriptor,
+    NULL,
+    0,             /* flags */
+    0,NULL,NULL    /* reserved1,reserved2, etc */
+  },
 };
-
 static const unsigned nsjail__ns_jail_config__field_indices_by_name[] = {
-       6,                      /* field[6] = bindhost */
-       43,                     /* field[43] = cgroup_mem_max */
-       44,                     /* field[44] = cgroup_mem_mount */
-       45,                     /* field[45] = cgroup_mem_parent */
-       46,                     /* field[46] = cgroup_pids_max */
-       47,                     /* field[47] = cgroup_pids_mount */
-       48,                     /* field[48] = cgroup_pids_parent */
-       1,                      /* field[1] = chroot_dir */
-       36,                     /* field[36] = clone_newcgroup */
-       34,                     /* field[34] = clone_newipc */
-       30,                     /* field[30] = clone_newnet */
-       32,                     /* field[32] = clone_newns */
-       33,                     /* field[33] = clone_newpid */
-       31,                     /* field[31] = clone_newuser */
-       35,                     /* field[35] = clone_newuts */
-       4,                      /* field[4] = cwd */
-       9,                      /* field[9] = daemon */
-       17,                     /* field[17] = disable_no_new_privs */
-       54,                     /* field[54] = exec_bin */
-       38,                     /* field[38] = gidmap */
-       3,                      /* field[3] = hostname */
-       49,                     /* field[49] = iface_no_lo */
-       2,                      /* field[2] = is_root_rw */
-       12,                     /* field[12] = keep_env */
-       10,                     /* field[10] = log_file */
-       11,                     /* field[11] = log_level */
-       50,                     /* field[50] = macvlan_iface */
-       53,                     /* field[53] = macvlan_vs_gw */
-       51,                     /* field[51] = macvlan_vs_ip */
-       52,                     /* field[52] = macvlan_vs_nm */
-       7,                      /* field[7] = max_conns_per_ip */
-       0,                      /* field[0] = mode */
-       39,                     /* field[39] = mount */
-       40,                     /* field[40] = mount_proc */
-       15,                     /* field[15] = pass_fd */
-       25,                     /* field[25] = persona_addr_compat_layout */
-       28,                     /* field[28] = persona_addr_limit_3gb */
-       29,                     /* field[29] = persona_addr_no_randomize */
-       26,                     /* field[26] = persona_mmap_page_zero */
-       27,                     /* field[27] = persona_read_implies_exec */
-       16,                     /* field[16] = pivot_root_only */
-       5,                      /* field[5] = port */
-       18,                     /* field[18] = rlimit_as */
-       19,                     /* field[19] = rlimit_core */
-       20,                     /* field[20] = rlimit_cpu */
-       21,                     /* field[21] = rlimit_fsize */
-       22,                     /* field[22] = rlimit_nofile */
-       23,                     /* field[23] = rlimit_nproc */
-       24,                     /* field[24] = rlimit_stack */
-       41,                     /* field[41] = seccomp_policy_file */
-       42,                     /* field[42] = seccomp_string */
-       13,                     /* field[13] = silent */
-       14,                     /* field[14] = skip_setsid */
-       8,                      /* field[8] = time_limit */
-       37,                     /* field[37] = uidmap */
+  6,   /* field[6] = bindhost */
+  43,   /* field[43] = cgroup_mem_max */
+  44,   /* field[44] = cgroup_mem_mount */
+  45,   /* field[45] = cgroup_mem_parent */
+  46,   /* field[46] = cgroup_pids_max */
+  47,   /* field[47] = cgroup_pids_mount */
+  48,   /* field[48] = cgroup_pids_parent */
+  1,   /* field[1] = chroot_dir */
+  36,   /* field[36] = clone_newcgroup */
+  34,   /* field[34] = clone_newipc */
+  30,   /* field[30] = clone_newnet */
+  32,   /* field[32] = clone_newns */
+  33,   /* field[33] = clone_newpid */
+  31,   /* field[31] = clone_newuser */
+  35,   /* field[35] = clone_newuts */
+  4,   /* field[4] = cwd */
+  9,   /* field[9] = daemon */
+  17,   /* field[17] = disable_no_new_privs */
+  54,   /* field[54] = exec_bin */
+  38,   /* field[38] = gidmap */
+  3,   /* field[3] = hostname */
+  49,   /* field[49] = iface_no_lo */
+  2,   /* field[2] = is_root_rw */
+  12,   /* field[12] = keep_env */
+  10,   /* field[10] = log_file */
+  11,   /* field[11] = log_level */
+  50,   /* field[50] = macvlan_iface */
+  53,   /* field[53] = macvlan_vs_gw */
+  51,   /* field[51] = macvlan_vs_ip */
+  52,   /* field[52] = macvlan_vs_nm */
+  7,   /* field[7] = max_conns_per_ip */
+  0,   /* field[0] = mode */
+  39,   /* field[39] = mount */
+  40,   /* field[40] = mount_proc */
+  15,   /* field[15] = pass_fd */
+  25,   /* field[25] = persona_addr_compat_layout */
+  28,   /* field[28] = persona_addr_limit_3gb */
+  29,   /* field[29] = persona_addr_no_randomize */
+  26,   /* field[26] = persona_mmap_page_zero */
+  27,   /* field[27] = persona_read_implies_exec */
+  16,   /* field[16] = pivot_root_only */
+  5,   /* field[5] = port */
+  18,   /* field[18] = rlimit_as */
+  19,   /* field[19] = rlimit_core */
+  20,   /* field[20] = rlimit_cpu */
+  21,   /* field[21] = rlimit_fsize */
+  22,   /* field[22] = rlimit_nofile */
+  23,   /* field[23] = rlimit_nproc */
+  24,   /* field[24] = rlimit_stack */
+  41,   /* field[41] = seccomp_policy_file */
+  42,   /* field[42] = seccomp_string */
+  13,   /* field[13] = silent */
+  14,   /* field[14] = skip_setsid */
+  8,   /* field[8] = time_limit */
+  37,   /* field[37] = uidmap */
 };
-
-static const ProtobufCIntRange nsjail__ns_jail_config__number_ranges[2 + 1] = {
-       {1, 0},
-       {6, 3},
-       {0, 55}
+static const ProtobufCIntRange nsjail__ns_jail_config__number_ranges[2 + 1] =
+{
+  { 1, 0 },
+  { 6, 3 },
+  { 0, 55 }
 };
-
-const ProtobufCMessageDescriptor nsjail__ns_jail_config__descriptor = {
-       PROTOBUF_C__MESSAGE_DESCRIPTOR_MAGIC,
-       "nsjail.NsJailConfig",
-       "NsJailConfig",
-       "Nsjail__NsJailConfig",
-       "nsjail",
-       sizeof(Nsjail__NsJailConfig),
-       55,
-       nsjail__ns_jail_config__field_descriptors,
-       nsjail__ns_jail_config__field_indices_by_name,
-       2, nsjail__ns_jail_config__number_ranges,
-       (ProtobufCMessageInit) nsjail__ns_jail_config__init,
-       NULL, NULL, NULL        /* reserved[123] */
+const ProtobufCMessageDescriptor nsjail__ns_jail_config__descriptor =
+{
+  PROTOBUF_C__MESSAGE_DESCRIPTOR_MAGIC,
+  "nsjail.NsJailConfig",
+  "NsJailConfig",
+  "Nsjail__NsJailConfig",
+  "nsjail",
+  sizeof(Nsjail__NsJailConfig),
+  55,
+  nsjail__ns_jail_config__field_descriptors,
+  nsjail__ns_jail_config__field_indices_by_name,
+  2,  nsjail__ns_jail_config__number_ranges,
+  (ProtobufCMessageInit) nsjail__ns_jail_config__init,
+  NULL,NULL,NULL    /* reserved[123] */
 };
-
-static const ProtobufCEnumValue nsjail__mode__enum_values_by_number[4] = {
-       {"LISTEN", "NSJAIL__MODE__LISTEN", 0},
-       {"ONCE", "NSJAIL__MODE__ONCE", 1},
-       {"RERUN", "NSJAIL__MODE__RERUN", 2},
-       {"EXECVE", "NSJAIL__MODE__EXECVE", 3},
+static const ProtobufCEnumValue nsjail__mode__enum_values_by_number[4] =
+{
+  { "LISTEN", "NSJAIL__MODE__LISTEN", 0 },
+  { "ONCE", "NSJAIL__MODE__ONCE", 1 },
+  { "RERUN", "NSJAIL__MODE__RERUN", 2 },
+  { "EXECVE", "NSJAIL__MODE__EXECVE", 3 },
 };
-
 static const ProtobufCIntRange nsjail__mode__value_ranges[] = {
-       {0, 0}, {0, 4}
+{0, 0},{0, 4}
 };
-
-static const ProtobufCEnumValueIndex nsjail__mode__enum_values_by_name[4] = {
-       {"EXECVE", 3},
-       {"LISTEN", 0},
-       {"ONCE", 1},
-       {"RERUN", 2},
+static const ProtobufCEnumValueIndex nsjail__mode__enum_values_by_name[4] =
+{
+  { "EXECVE", 3 },
+  { "LISTEN", 0 },
+  { "ONCE", 1 },
+  { "RERUN", 2 },
 };
-
-const ProtobufCEnumDescriptor nsjail__mode__descriptor = {
-       PROTOBUF_C__ENUM_DESCRIPTOR_MAGIC,
-       "nsjail.Mode",
-       "Mode",
-       "Nsjail__Mode",
-       "nsjail",
-       4,
-       nsjail__mode__enum_values_by_number,
-       4,
-       nsjail__mode__enum_values_by_name,
-       1,
-       nsjail__mode__value_ranges,
-       NULL, NULL, NULL, NULL  /* reserved[1234] */
+const ProtobufCEnumDescriptor nsjail__mode__descriptor =
+{
+  PROTOBUF_C__ENUM_DESCRIPTOR_MAGIC,
+  "nsjail.Mode",
+  "Mode",
+  "Nsjail__Mode",
+  "nsjail",
+  4,
+  nsjail__mode__enum_values_by_number,
+  4,
+  nsjail__mode__enum_values_by_name,
+  1,
+  nsjail__mode__value_ranges,
+  NULL,NULL,NULL,NULL   /* reserved[1234] */
 };
-
-static const ProtobufCEnumValue nsjail__log_level__enum_values_by_number[5] = {
-       {"DEBUG", "NSJAIL__LOG_LEVEL__DEBUG", 0},
-       {"INFO", "NSJAIL__LOG_LEVEL__INFO", 1},
-       {"WARNING", "NSJAIL__LOG_LEVEL__WARNING", 2},
-       {"ERROR", "NSJAIL__LOG_LEVEL__ERROR", 3},
-       {"FATAL", "NSJAIL__LOG_LEVEL__FATAL", 4},
+static const ProtobufCEnumValue nsjail__log_level__enum_values_by_number[5] =
+{
+  { "DEBUG", "NSJAIL__LOG_LEVEL__DEBUG", 0 },
+  { "INFO", "NSJAIL__LOG_LEVEL__INFO", 1 },
+  { "WARNING", "NSJAIL__LOG_LEVEL__WARNING", 2 },
+  { "ERROR", "NSJAIL__LOG_LEVEL__ERROR", 3 },
+  { "FATAL", "NSJAIL__LOG_LEVEL__FATAL", 4 },
 };
-
 static const ProtobufCIntRange nsjail__log_level__value_ranges[] = {
-       {0, 0}, {0, 5}
+{0, 0},{0, 5}
 };
-
-static const ProtobufCEnumValueIndex nsjail__log_level__enum_values_by_name[5] = {
-       {"DEBUG", 0},
-       {"ERROR", 3},
-       {"FATAL", 4},
-       {"INFO", 1},
-       {"WARNING", 2},
+static const ProtobufCEnumValueIndex nsjail__log_level__enum_values_by_name[5] =
+{
+  { "DEBUG", 0 },
+  { "ERROR", 3 },
+  { "FATAL", 4 },
+  { "INFO", 1 },
+  { "WARNING", 2 },
 };
-
-const ProtobufCEnumDescriptor nsjail__log_level__descriptor = {
-       PROTOBUF_C__ENUM_DESCRIPTOR_MAGIC,
-       "nsjail.LogLevel",
-       "LogLevel",
-       "Nsjail__LogLevel",
-       "nsjail",
-       5,
-       nsjail__log_level__enum_values_by_number,
-       5,
-       nsjail__log_level__enum_values_by_name,
-       1,
-       nsjail__log_level__value_ranges,
-       NULL, NULL, NULL, NULL  /* reserved[1234] */
+const ProtobufCEnumDescriptor nsjail__log_level__descriptor =
+{
+  PROTOBUF_C__ENUM_DESCRIPTOR_MAGIC,
+  "nsjail.LogLevel",
+  "LogLevel",
+  "Nsjail__LogLevel",
+  "nsjail",
+  5,
+  nsjail__log_level__enum_values_by_number,
+  5,
+  nsjail__log_level__enum_values_by_name,
+  1,
+  nsjail__log_level__value_ranges,
+  NULL,NULL,NULL,NULL   /* reserved[1234] */
 };
index 48362695ea078c9574b5a0cd1b538a1289d95c74..ff09c1099cbb44e5b3a4bb097dccbf8bce947d5b 100644 (file)
@@ -7,40 +7,71 @@
 #include <protobuf-c/protobuf-c.h>
 
 PROTOBUF_C__BEGIN_DECLS
+
 #if PROTOBUF_C_VERSION_NUMBER < 1000000
-#error This file was generated by a newer version of protoc-c which is incompatible with your libprotobuf-c headers. Please update your headers.
+# error This file was generated by a newer version of protoc-c which is incompatible with your libprotobuf-c headers. Please update your headers.
 #elif 1002001 < PROTOBUF_C_MIN_COMPILER_VERSION
-#error This file was generated by an older version of protoc-c which is incompatible with your libprotobuf-c headers. Please regenerate this file with a newer version of protoc-c.
+# error This file was generated by an older version of protoc-c which is incompatible with your libprotobuf-c headers. Please regenerate this file with a newer version of protoc-c.
 #endif
+
+
 typedef struct _Nsjail__IdMap Nsjail__IdMap;
 typedef struct _Nsjail__MountPt Nsjail__MountPt;
 typedef struct _Nsjail__Exe Nsjail__Exe;
 typedef struct _Nsjail__NsJailConfig Nsjail__NsJailConfig;
 
+
 /* --- enums --- */
 
 typedef enum _Nsjail__Mode {
-       NSJAIL__MODE__LISTEN = 0,
-       NSJAIL__MODE__ONCE = 1,
-       NSJAIL__MODE__RERUN = 2,
-       NSJAIL__MODE__EXECVE = 3 PROTOBUF_C__FORCE_ENUM_TO_BE_INT_SIZE(NSJAIL__MODE)
+  /*
+   * Listening on a TCP port              
+   */
+  NSJAIL__MODE__LISTEN = 0,
+  /*
+   * Running the command once only        
+   */
+  NSJAIL__MODE__ONCE = 1,
+  /*
+   * Re-executing the command (forever)   
+   */
+  NSJAIL__MODE__RERUN = 2,
+  /*
+   * Executing command w/o the supervisor 
+   */
+  NSJAIL__MODE__EXECVE = 3
+    PROTOBUF_C__FORCE_ENUM_TO_BE_INT_SIZE(NSJAIL__MODE)
 } Nsjail__Mode;
+/*
+ * Should be self explanatory 
+ */
 typedef enum _Nsjail__LogLevel {
-       NSJAIL__LOG_LEVEL__DEBUG = 0,
-       NSJAIL__LOG_LEVEL__INFO = 1,
-       NSJAIL__LOG_LEVEL__WARNING = 2,
-       NSJAIL__LOG_LEVEL__ERROR = 3,
-       NSJAIL__LOG_LEVEL__FATAL = 4 PROTOBUF_C__FORCE_ENUM_TO_BE_INT_SIZE(NSJAIL__LOG_LEVEL)
+  NSJAIL__LOG_LEVEL__DEBUG = 0,
+  NSJAIL__LOG_LEVEL__INFO = 1,
+  NSJAIL__LOG_LEVEL__WARNING = 2,
+  NSJAIL__LOG_LEVEL__ERROR = 3,
+  NSJAIL__LOG_LEVEL__FATAL = 4
+    PROTOBUF_C__FORCE_ENUM_TO_BE_INT_SIZE(NSJAIL__LOG_LEVEL)
 } Nsjail__LogLevel;
 
 /* --- messages --- */
 
-struct _Nsjail__IdMap {
-       ProtobufCMessage base;
-       char *inside_id;
-       char *outside_id;
-       uint32_t count;
-       protobuf_c_boolean use_newidmap;
+struct  _Nsjail__IdMap
+{
+  ProtobufCMessage base;
+  /*
+   * Empty string means "current uid/gid" 
+   */
+  char *inside_id;
+  char *outside_id;
+  /*
+   * 'man user_namespaces' for the meaning of count 
+   */
+  uint32_t count;
+  /*
+   * Does this map use /usr/bin/new[u|g]idmap binary? 
+   */
+  protobuf_c_boolean use_newidmap;
 };
 extern char nsjail__id_map__inside_id__default_value[];
 extern char nsjail__id_map__outside_id__default_value[];
@@ -48,96 +79,121 @@ extern char nsjail__id_map__outside_id__default_value[];
  { PROTOBUF_C_MESSAGE_INIT (&nsjail__id_map__descriptor) \
     , nsjail__id_map__inside_id__default_value, nsjail__id_map__outside_id__default_value, 1u, 0 }
 
-struct _Nsjail__MountPt {
-       ProtobufCMessage base;
-       char *src;
-       char *dst;
-       char *fstype;
-       char *options;
-       protobuf_c_boolean is_bind;
-       protobuf_c_boolean is_ro;
-       protobuf_c_boolean has_is_dir;
-       protobuf_c_boolean is_dir;
+
+struct  _Nsjail__MountPt
+{
+  ProtobufCMessage base;
+  /*
+   * Can be empty string for filesystems like 'proc' 
+   */
+  char *src;
+  char *dst;
+  /*
+   * Can be empty for mount --bind mounts 
+   */
+  char *fstype;
+  /*
+   * E.g. size=5000000 for 'tmpfs' 
+   */
+  char *options;
+  /*
+   * Is it 'mount --bind src dst' type of mount 
+   */
+  protobuf_c_boolean is_bind;
+  /*
+   * It it RO mount 
+   */
+  protobuf_c_boolean is_ro;
+  /*
+   * Is it directory? If not specified an internal
+   * heuristics will be used to determine that 
+   */
+  protobuf_c_boolean has_is_dir;
+  protobuf_c_boolean is_dir;
 };
 extern char nsjail__mount_pt__options__default_value[];
 #define NSJAIL__MOUNT_PT__INIT \
  { PROTOBUF_C_MESSAGE_INIT (&nsjail__mount_pt__descriptor) \
     , NULL, NULL, NULL, nsjail__mount_pt__options__default_value, 0, 0, 0,0 }
 
-struct _Nsjail__Exe {
-       ProtobufCMessage base;
-       char *path;
-       size_t n_arg;
-       char **arg;
+
+struct  _Nsjail__Exe
+{
+  ProtobufCMessage base;
+  char *path;
+  size_t n_arg;
+  char **arg;
 };
 #define NSJAIL__EXE__INIT \
  { PROTOBUF_C_MESSAGE_INIT (&nsjail__exe__descriptor) \
     , NULL, 0,NULL }
 
-struct _Nsjail__NsJailConfig {
-       ProtobufCMessage base;
-       Nsjail__Mode mode;
-       char *chroot_dir;
-       protobuf_c_boolean is_root_rw;
-       char *hostname;
-       char *cwd;
-       uint32_t port;
-       char *bindhost;
-       uint32_t max_conns_per_ip;
-       uint32_t time_limit;
-       protobuf_c_boolean daemon;
-       char *log_file;
-       protobuf_c_boolean has_log_level;
-       Nsjail__LogLevel log_level;
-       protobuf_c_boolean keep_env;
-       protobuf_c_boolean silent;
-       protobuf_c_boolean skip_setsid;
-       size_t n_pass_fd;
-       int32_t *pass_fd;
-       protobuf_c_boolean pivot_root_only;
-       protobuf_c_boolean disable_no_new_privs;
-       uint64_t rlimit_as;
-       uint64_t rlimit_core;
-       uint64_t rlimit_cpu;
-       uint64_t rlimit_fsize;
-       uint64_t rlimit_nofile;
-       protobuf_c_boolean has_rlimit_nproc;
-       uint64_t rlimit_nproc;
-       protobuf_c_boolean has_rlimit_stack;
-       uint64_t rlimit_stack;
-       protobuf_c_boolean persona_addr_compat_layout;
-       protobuf_c_boolean persona_mmap_page_zero;
-       protobuf_c_boolean persona_read_implies_exec;
-       protobuf_c_boolean persona_addr_limit_3gb;
-       protobuf_c_boolean persona_addr_no_randomize;
-       protobuf_c_boolean clone_newnet;
-       protobuf_c_boolean clone_newuser;
-       protobuf_c_boolean clone_newns;
-       protobuf_c_boolean clone_newpid;
-       protobuf_c_boolean clone_newipc;
-       protobuf_c_boolean clone_newuts;
-       protobuf_c_boolean clone_newcgroup;
-       size_t n_uidmap;
-       Nsjail__IdMap **uidmap;
-       size_t n_gidmap;
-       Nsjail__IdMap **gidmap;
-       size_t n_mount;
-       Nsjail__MountPt **mount;
-       protobuf_c_boolean mount_proc;
-       char *seccomp_policy_file;
-       char *seccomp_string;
-       uint64_t cgroup_mem_max;
-       char *cgroup_mem_mount;
-       char *cgroup_mem_parent;
-       uint64_t cgroup_pids_max;
-       char *cgroup_pids_mount;
-       char *cgroup_pids_parent;
-       protobuf_c_boolean iface_no_lo;
-       char *macvlan_iface;
-       char *macvlan_vs_ip;
-       char *macvlan_vs_nm;
-       char *macvlan_vs_gw;
-       Nsjail__Exe *exec_bin;
+
+struct  _Nsjail__NsJailConfig
+{
+  ProtobufCMessage base;
+  Nsjail__Mode mode;
+  char *chroot_dir;
+  protobuf_c_boolean is_root_rw;
+  char *hostname;
+  char *cwd;
+  uint32_t port;
+  char *bindhost;
+  uint32_t max_conns_per_ip;
+  uint32_t time_limit;
+  protobuf_c_boolean daemon;
+  char *log_file;
+  protobuf_c_boolean has_log_level;
+  Nsjail__LogLevel log_level;
+  protobuf_c_boolean keep_env;
+  protobuf_c_boolean silent;
+  protobuf_c_boolean skip_setsid;
+  size_t n_pass_fd;
+  int32_t *pass_fd;
+  protobuf_c_boolean pivot_root_only;
+  protobuf_c_boolean disable_no_new_privs;
+  uint64_t rlimit_as;
+  uint64_t rlimit_core;
+  uint64_t rlimit_cpu;
+  uint64_t rlimit_fsize;
+  uint64_t rlimit_nofile;
+  protobuf_c_boolean has_rlimit_nproc;
+  uint64_t rlimit_nproc;
+  protobuf_c_boolean has_rlimit_stack;
+  uint64_t rlimit_stack;
+  protobuf_c_boolean persona_addr_compat_layout;
+  protobuf_c_boolean persona_mmap_page_zero;
+  protobuf_c_boolean persona_read_implies_exec;
+  protobuf_c_boolean persona_addr_limit_3gb;
+  protobuf_c_boolean persona_addr_no_randomize;
+  protobuf_c_boolean clone_newnet;
+  protobuf_c_boolean clone_newuser;
+  protobuf_c_boolean clone_newns;
+  protobuf_c_boolean clone_newpid;
+  protobuf_c_boolean clone_newipc;
+  protobuf_c_boolean clone_newuts;
+  protobuf_c_boolean clone_newcgroup;
+  size_t n_uidmap;
+  Nsjail__IdMap **uidmap;
+  size_t n_gidmap;
+  Nsjail__IdMap **gidmap;
+  size_t n_mount;
+  Nsjail__MountPt **mount;
+  protobuf_c_boolean mount_proc;
+  char *seccomp_policy_file;
+  char *seccomp_string;
+  uint64_t cgroup_mem_max;
+  char *cgroup_mem_mount;
+  char *cgroup_mem_parent;
+  uint64_t cgroup_pids_max;
+  char *cgroup_pids_mount;
+  char *cgroup_pids_parent;
+  protobuf_c_boolean iface_no_lo;
+  char *macvlan_iface;
+  char *macvlan_vs_ip;
+  char *macvlan_vs_nm;
+  char *macvlan_vs_gw;
+  Nsjail__Exe *exec_bin;
 };
 extern char nsjail__ns_jail_config__hostname__default_value[];
 extern char nsjail__ns_jail_config__cwd__default_value[];
@@ -153,60 +209,111 @@ extern char nsjail__ns_jail_config__macvlan_vs_gw__default_value[];
  { PROTOBUF_C_MESSAGE_INIT (&nsjail__ns_jail_config__descriptor) \
     , NSJAIL__MODE__ONCE, NULL, 0, nsjail__ns_jail_config__hostname__default_value, nsjail__ns_jail_config__cwd__default_value, 0u, nsjail__ns_jail_config__bindhost__default_value, 0u, 600u, 0, NULL, 0,0, 0, 0, 0, 0,NULL, 0, 0, 512ull, 0ull, 600ull, 1ull, 32ull, 0,0, 0,0, 0, 0, 0, 0, 0, 1, 1, 1, 1, 1, 1, 0, 0,NULL, 0,NULL, 0,NULL, 1, NULL, NULL, 0ull, nsjail__ns_jail_config__cgroup_mem_mount__default_value, nsjail__ns_jail_config__cgroup_mem_parent__default_value, 0ull, nsjail__ns_jail_config__cgroup_pids_mount__default_value, nsjail__ns_jail_config__cgroup_pids_parent__default_value, 0, NULL, nsjail__ns_jail_config__macvlan_vs_ip__default_value, nsjail__ns_jail_config__macvlan_vs_nm__default_value, nsjail__ns_jail_config__macvlan_vs_gw__default_value, NULL }
 
+
 /* Nsjail__IdMap methods */
-void nsjail__id_map__init(Nsjail__IdMap * message);
-size_t nsjail__id_map__get_packed_size(const Nsjail__IdMap * message);
-size_t nsjail__id_map__pack(const Nsjail__IdMap * message, uint8_t * out);
-size_t nsjail__id_map__pack_to_buffer(const Nsjail__IdMap * message, ProtobufCBuffer * buffer);
-Nsjail__IdMap *nsjail__id_map__unpack
-    (ProtobufCAllocator * allocator, size_t len, const uint8_t * data);
-void nsjail__id_map__free_unpacked(Nsjail__IdMap * message, ProtobufCAllocator * allocator);
+void   nsjail__id_map__init
+                     (Nsjail__IdMap         *message);
+size_t nsjail__id_map__get_packed_size
+                     (const Nsjail__IdMap   *message);
+size_t nsjail__id_map__pack
+                     (const Nsjail__IdMap   *message,
+                      uint8_t             *out);
+size_t nsjail__id_map__pack_to_buffer
+                     (const Nsjail__IdMap   *message,
+                      ProtobufCBuffer     *buffer);
+Nsjail__IdMap *
+       nsjail__id_map__unpack
+                     (ProtobufCAllocator  *allocator,
+                      size_t               len,
+                      const uint8_t       *data);
+void   nsjail__id_map__free_unpacked
+                     (Nsjail__IdMap *message,
+                      ProtobufCAllocator *allocator);
 /* Nsjail__MountPt methods */
-void nsjail__mount_pt__init(Nsjail__MountPt * message);
-size_t nsjail__mount_pt__get_packed_size(const Nsjail__MountPt * message);
-size_t nsjail__mount_pt__pack(const Nsjail__MountPt * message, uint8_t * out);
-size_t nsjail__mount_pt__pack_to_buffer(const Nsjail__MountPt * message, ProtobufCBuffer * buffer);
-Nsjail__MountPt *nsjail__mount_pt__unpack
-    (ProtobufCAllocator * allocator, size_t len, const uint8_t * data);
-void nsjail__mount_pt__free_unpacked(Nsjail__MountPt * message, ProtobufCAllocator * allocator);
+void   nsjail__mount_pt__init
+                     (Nsjail__MountPt         *message);
+size_t nsjail__mount_pt__get_packed_size
+                     (const Nsjail__MountPt   *message);
+size_t nsjail__mount_pt__pack
+                     (const Nsjail__MountPt   *message,
+                      uint8_t             *out);
+size_t nsjail__mount_pt__pack_to_buffer
+                     (const Nsjail__MountPt   *message,
+                      ProtobufCBuffer     *buffer);
+Nsjail__MountPt *
+       nsjail__mount_pt__unpack
+                     (ProtobufCAllocator  *allocator,
+                      size_t               len,
+                      const uint8_t       *data);
+void   nsjail__mount_pt__free_unpacked
+                     (Nsjail__MountPt *message,
+                      ProtobufCAllocator *allocator);
 /* Nsjail__Exe methods */
-void nsjail__exe__init(Nsjail__Exe * message);
-size_t nsjail__exe__get_packed_size(const Nsjail__Exe * message);
-size_t nsjail__exe__pack(const Nsjail__Exe * message, uint8_t * out);
-size_t nsjail__exe__pack_to_buffer(const Nsjail__Exe * message, ProtobufCBuffer * buffer);
-Nsjail__Exe *nsjail__exe__unpack(ProtobufCAllocator * allocator, size_t len, const uint8_t * data);
-void nsjail__exe__free_unpacked(Nsjail__Exe * message, ProtobufCAllocator * allocator);
+void   nsjail__exe__init
+                     (Nsjail__Exe         *message);
+size_t nsjail__exe__get_packed_size
+                     (const Nsjail__Exe   *message);
+size_t nsjail__exe__pack
+                     (const Nsjail__Exe   *message,
+                      uint8_t             *out);
+size_t nsjail__exe__pack_to_buffer
+                     (const Nsjail__Exe   *message,
+                      ProtobufCBuffer     *buffer);
+Nsjail__Exe *
+       nsjail__exe__unpack
+                     (ProtobufCAllocator  *allocator,
+                      size_t               len,
+                      const uint8_t       *data);
+void   nsjail__exe__free_unpacked
+                     (Nsjail__Exe *message,
+                      ProtobufCAllocator *allocator);
 /* Nsjail__NsJailConfig methods */
-void nsjail__ns_jail_config__init(Nsjail__NsJailConfig * message);
-size_t nsjail__ns_jail_config__get_packed_size(const Nsjail__NsJailConfig * message);
-size_t nsjail__ns_jail_config__pack(const Nsjail__NsJailConfig * message, uint8_t * out);
+void   nsjail__ns_jail_config__init
+                     (Nsjail__NsJailConfig         *message);
+size_t nsjail__ns_jail_config__get_packed_size
+                     (const Nsjail__NsJailConfig   *message);
+size_t nsjail__ns_jail_config__pack
+                     (const Nsjail__NsJailConfig   *message,
+                      uint8_t             *out);
 size_t nsjail__ns_jail_config__pack_to_buffer
-    (const Nsjail__NsJailConfig * message, ProtobufCBuffer * buffer);
-Nsjail__NsJailConfig *nsjail__ns_jail_config__unpack
-    (ProtobufCAllocator * allocator, size_t len, const uint8_t * data);
-void nsjail__ns_jail_config__free_unpacked
-    (Nsjail__NsJailConfig * message, ProtobufCAllocator * allocator);
+                     (const Nsjail__NsJailConfig   *message,
+                      ProtobufCBuffer     *buffer);
+Nsjail__NsJailConfig *
+       nsjail__ns_jail_config__unpack
+                     (ProtobufCAllocator  *allocator,
+                      size_t               len,
+                      const uint8_t       *data);
+void   nsjail__ns_jail_config__free_unpacked
+                     (Nsjail__NsJailConfig *message,
+                      ProtobufCAllocator *allocator);
 /* --- per-message closures --- */
 
 typedef void (*Nsjail__IdMap_Closure)
- (const Nsjail__IdMap * message, void *closure_data);
+                 (const Nsjail__IdMap *message,
+                  void *closure_data);
 typedef void (*Nsjail__MountPt_Closure)
- (const Nsjail__MountPt * message, void *closure_data);
+                 (const Nsjail__MountPt *message,
+                  void *closure_data);
 typedef void (*Nsjail__Exe_Closure)
- (const Nsjail__Exe * message, void *closure_data);
+                 (const Nsjail__Exe *message,
+                  void *closure_data);
 typedef void (*Nsjail__NsJailConfig_Closure)
- (const Nsjail__NsJailConfig * message, void *closure_data);
+                 (const Nsjail__NsJailConfig *message,
+                  void *closure_data);
 
 /* --- services --- */
 
+
 /* --- descriptors --- */
 
-extern const ProtobufCEnumDescriptor nsjail__mode__descriptor;
-extern const ProtobufCEnumDescriptor nsjail__log_level__descriptor;
+extern const ProtobufCEnumDescriptor    nsjail__mode__descriptor;
+extern const ProtobufCEnumDescriptor    nsjail__log_level__descriptor;
 extern const ProtobufCMessageDescriptor nsjail__id_map__descriptor;
 extern const ProtobufCMessageDescriptor nsjail__mount_pt__descriptor;
 extern const ProtobufCMessageDescriptor nsjail__exe__descriptor;
 extern const ProtobufCMessageDescriptor nsjail__ns_jail_config__descriptor;
 
 PROTOBUF_C__END_DECLS
-#endif                         /* PROTOBUF_C_config_2eproto__INCLUDED */
+
+
+#endif  /* PROTOBUF_C_config_2eproto__INCLUDED */
index 28119abbd345d5b8eaec8c54d0eec8ed133e5844..91912e09ce83ac7be4f10d775267cf435763d8fe 100644 (file)
@@ -3,12 +3,13 @@ syntax = "proto2";
 package nsjail;
 
 enum Mode {
-       LISTEN = 0;
-       ONCE = 1;
-       RERUN = 2;
-       EXECVE = 3;
+       LISTEN = 0;  /* Listening on a TCP port              */
+       ONCE = 1;    /* Running the command once only        */
+       RERUN = 2;   /* Re-executing the command (forever)   */
+       EXECVE = 3;  /* Executing command w/o the supervisor */
 }
 
+/* Should be self explanatory */
 enum LogLevel {
        DEBUG = 0;
        INFO = 1;
@@ -18,93 +19,151 @@ enum LogLevel {
 }
 
 message IdMap {
+       /* Empty string means "current uid/gid" */
        required string inside_id = 1 [default = ""];
        required string outside_id = 2 [default = ""];
+       /* 'man user_namespaces' for the meaning of count */
        required uint32 count = 3 [default = 1];
+       /* Does this map use /usr/bin/new[u|g]idmap binary? */
        required bool use_newidmap = 4 [default = false];
 }
 
 message MountPt {
+       /* Can be empty string for filesystems like 'proc' */
        required string src = 1;
        required string dst = 2;
+       /* Can be empty for mount --bind mounts */
        required string fstype = 3;
+       /* E.g. size=5000000 for 'tmpfs' */
        required string options = 4 [default = ""];
+       /* Is it 'mount --bind src dst' type of mount */
        required bool is_bind = 5 [default = false];
+       /* It it RO mount */
        required bool is_ro = 6 [default = false];
+       /* Is it directory? If not specified an internal
+        * heuristics will be used to determine that */
        optional bool is_dir = 7;
 }
 
 message Exe {
+       /* This will be usef both for path and for argv[0] */
        required string path = 1;
+       /* This will be argv[1] and so on.. */
        repeated string arg = 2;
 }
 
 message NsJailConfig {
+       /* Execution mode: see 'msg Mode' description for more */
        required Mode mode = 1 [default = ONCE];
+       /* Equivalent to a mount with dst='/' */
        optional string chroot_dir = 2;
+       /* Applies both to the chroot_dir and to /proc mounts */
        required bool is_root_rw = 3 [default = false];
+       /* Hostname inside jail */
        required string hostname = 6 [default = "NSJAIL"];
+       /* Initial current working directory for the binary */
        required string cwd = 7 [default = "/"];
 
+       /* TCP port to listen to. Valid with mode=LISTEN only */
        required uint32 port = 8 [default = 0];
+       /* Host to bind to for mode=LISTEN. Must be in IPv6 format */
        required string bindhost = 9 [default = "::"];
+       /* For mode=LISTEN, maximum number of connections from a single IP */
        required uint32 max_conns_per_ip = 10 [default = 0];
 
+       /* Wall-time time limit for commands */
        required uint32 time_limit = 11 [default = 600];
+       /* Should nsjail go into background? */
        required bool daemon = 12 [default = false];
+       /* File to save lofs to */
        optional string log_file = 13;
+       /* Minimum log level displayed.
+          See 'msg LogLevel' description for more */
        optional LogLevel log_level = 14;
+    /* Should the current environment variables be kept
+       when executing the binary */
        required bool keep_env = 15 [default = false];
+       /* Should nsjail close FD=0,1,2 before executing the process */
        required bool silent = 16 [default = false];
+       /* Should the child process have control over terminal?
+       Can be useful to allow /bin/sh to provide
+       job control / signals */
        required bool skip_setsid = 17 [default = false];
+    /* Which FDs should be passed to the newly executed process
+       By default only FD=0,1,2 are passed */
        repeated int32 pass_fd = 18;
+    /* Should pivot_root be used instead of chroot?
+       Using pivot_root allows to have subnamespaces */
        required bool pivot_root_only = 19 [ default = false];
+       /* Setting it to true will allow to have set-uid binaries
+       inside the jail */
        required bool disable_no_new_privs = 20 [default = false];
 
-       required uint64 rlimit_as = 21 [default = 512];
-       required uint64 rlimit_core = 22 [default = 0];
-       required uint64 rlimit_cpu = 23 [default = 600];
-       required uint64 rlimit_fsize = 24 [default = 1];
+       required uint64 rlimit_as = 21 [default = 512];    /* In MiB     */
+       required uint64 rlimit_core = 22 [default = 0];    /* In MiB     */
+       required uint64 rlimit_cpu = 23 [default = 600];   /* In seconds */
+       required uint64 rlimit_fsize = 24 [default = 1];   /* In MiB     */
        required uint64 rlimit_nofile = 25 [default = 32];
        optional uint64 rlimit_nproc = 26;
-       optional uint64 rlimit_stack = 27;
+       optional uint64 rlimit_stack = 27;                 /* In MiB     */
 
+       /* See 'man personality' for more */
        required bool persona_addr_compat_layout = 28 [default = false];
        required bool persona_mmap_page_zero = 29 [default = false];
        required bool persona_read_implies_exec = 30 [default = false];
        required bool persona_addr_limit_3gb = 31 [default = false];
        required bool persona_addr_no_randomize = 32 [default = false];
 
+       /* Which name-spaces should be used? */
        required bool clone_newnet = 33 [default = true];
        required bool clone_newuser = 34 [default = true];
        required bool clone_newns = 35 [default = true];
        required bool clone_newpid = 36 [default = true];
        required bool clone_newipc = 37 [default = true];
        required bool clone_newuts = 38 [default = true];
+       /* It's only supported in newer kernels, hence disabled by default */
        required bool clone_newcgroup = 39 [default = false];
 
+       /* Mappings for UIDs and GIDs. See the description for 'msg IdMap'
+       for more */
        repeated IdMap uidmap = 40;
        repeated IdMap gidmap = 41;
 
+       /* Mount points inside the jail. See the description for 'msg MountPt'
+       for more */
        repeated MountPt mount = 42;
+       /* Should /proc be mounted? One can also force this in the 'mount' */
        required bool mount_proc = 43 [default = true];
 
+       /* Kafel seccomp policy file or string.
+       Homepage of the project: https://github.com/google/kafel */
        optional string seccomp_policy_file = 44;
        optional string seccomp_string = 45;
 
-       required uint64 cgroup_mem_max = 46 [default = 0];
+       /* If > 0, maximum cumulative size of RAM used inside jail */
+       required uint64 cgroup_mem_max = 46 [default = 0];  /* In MiB */
+       /* Mount point for cgroups-memory */
        required string cgroup_mem_mount = 47 [default = "/sys/fs/cgroup/memory"];
+       /* Writeable directory (for the nsjail user) under cgroup_mem_mount */
        required string cgroup_mem_parent = 48 [default = "NSJAIL"];
 
+       /* If > 0, maximum number of PIDs (threads/processes) inside jail */
        required uint64 cgroup_pids_max = 49 [default = 0];
+       /* Mount point for cgroups-memory */
        required string cgroup_pids_mount = 50 [default = "/sys/fs/cgroup/pids"];
+       /* Writeable directory (for the nsjail user) under cgroup_pids_mount */
        required string cgroup_pids_parent = 51 [default = "NSJAIL"];
 
+       /* Should the 'lo' interface be brought up inside jail? */
        required bool iface_no_lo = 52 [default = false];
-       optional string macvlan_iface = 53;
+
+       /* Parameters for the cloned MACVLAN interface inside jail */
+       optional string macvlan_iface = 53;  /* Interface to be cloned, eg 'eth0' */
        required string macvlan_vs_ip = 54 [default = "192.168.0.2"];
        required string macvlan_vs_nm = 55 [default = "255.255.255.0"];
        required string macvlan_vs_gw = 56 [default = "192.168.0.1"];
 
+       /* Binary with arguments to be executed. If not specified here, it can be
+       specified with the command-line as "-- /path/to/command arg1 arg2" */
        optional Exe exec_bin = 57;
 }