/[path-sandbox]/tags/sandbox_1_2_18_1/ChangeLog
Gentoo

Contents of /tags/sandbox_1_2_18_1/ChangeLog

Parent Directory Parent Directory | Revision Log Revision Log


Revision 255 - (show annotations) (download)
Fri May 19 12:11:42 2006 UTC (8 years, 2 months ago) by azarah
File size: 31585 byte(s)
Tag sandbox-1.2.18.1 release.

1 2006-05-19 12:08 azarah
2
3 * configure.ac: Release sandbox-1.2.18.1
4
5 2006-05-09 09:30 azarah
6
7 * src/libsandbox.c: Do not free buffer returned by getcwd() if it
8 was not obtained by getcwd(),
9 bug #125701, thanks Mike.
10
11 2006-05-08 14:15 azarah
12
13 * src/libsandbox.c: Comment egetcwd() some more, and fix a
14 double-free.
15
16 2006-05-03 11:21 azarah
17
18 * configure.ac: Release sandbox-1.2.18.
19
20 2006-05-03 11:18 azarah
21
22 * src/libsandbox.c: If glibc/kernel side of getcwd() screwed up,
23 return ENAMETOOLONG.
24
25 2006-04-25 08:27 azarah
26
27 * scripts/gen_symbol_header.awk,
28 scripts/gen_symbol_version_map.awk: Fix symbol/map generation on
29 Alpha. Thanks to report from
30 Fernando J. Pereda <ferdy@gentoo.org>.
31
32 2006-04-25 08:25 azarah
33
34 * src/libsandbox.c: Try to triple check getcwd() sanity. Do not
35 think it will help for
36 bug #125701, but we try.
37
38 2006-02-06 13:49 azarah
39
40 * scripts/svn2cl.sh, scripts/svn2cl.xsl: Update svn2cl and fix
41 parse issue with latest libxslt-1.1.15.
42
43 2006-02-06 12:45 azarah
44
45 * autogen.sh: Revert last change, and add comment.
46
47 2006-02-06 05:02 vapier
48
49 * configure.ac: add static/shared library checks to prevent anyone
50 else wasting our time
51
52 2006-02-06 04:11 vapier
53
54 * data, scripts, src: ignore more generated files
55 * autogen.sh: force people to use -n if they want to generate stuff
56
57 2006-02-06 04:08 vapier
58
59 * ., data, scripts, src: ignore generated files
60 * configure.ac: syntax touchups
61
62 2006-02-06 04:04 vapier
63
64 * configure.ac: log issues with LIBC PATH a little better
65
66 2005-12-10 12:12 azarah
67
68 * scripts/gen_symbol_header.awk: Cleanup.
69
70 2005-12-10 11:51 azarah
71
72 * configure.ac, scripts/gen_symbol_header.awk,
73 scripts/gen_symbol_version_map.awk: Add support for readelf from
74 elfutils.
75
76 2005-12-05 22:49 azarah
77
78 * configure.ac, src/Makefile.am, src/libsandbox.c: More configure
79 related cleanups. Define HAVE_RTLD_NEXT
80 via config.h.
81
82 2005-12-05 17:14 azarah
83
84 * configure.ac: Indentation fixes and other cleanups.
85
86 2005-12-05 16:55 azarah
87
88 * configure.ac: Small cleanups.
89
90 2005-12-05 14:35 azarah
91
92 * configure.ac: We use memcpy() now and no longer mempcpy().
93
94 2005-12-05 14:34 azarah
95
96 * scripts/gen_symbol_header.awk,
97 scripts/gen_symbol_version_map.awk: Fix weak symbols on 32bit
98 glibc where it have a different version.
99
100 2005-12-05 14:07 azarah
101
102 * configure.ac: Release sandbox-1.2.17.
103
104 2005-12-05 14:06 azarah
105
106 * src/libsandbox.c: Small tweak.
107
108 2005-12-05 13:55 azarah
109
110 * configure.ac: Fix regex for newer uclibc that also matches
111 /lib/ld-uClibc.so.0.
112
113 2005-12-05 13:54 azarah
114
115 * src/libsandbox.c: Cleanup RTLD defines.
116
117 2005-12-05 13:41 azarah
118
119 * src/getcwd.c: Remove getcwd.c, as its no longer used.
120
121 2005-12-05 13:40 azarah
122
123 * localdecls.h, src/Makefile.am, src/getcwd.c, src/libsandbox.c,
124 src/libsandbox.h, src/sandbox.c, src/sandbox.h,
125 src/symbols.h.in: More changes to try and resolve OSes with
126 generic getcwd() implementations.
127
128 2005-12-05 11:24 azarah
129
130 * src/libsandbox.h: FreeBSD have RTLD_NOW, but still have the
131 getcwd() issue.
132
133 2005-12-05 11:18 azarah
134
135 * src/Makefile.am, src/getcwd.c, src/libsandbox.h: Split
136 sandbox_on stuff out to libsandbox.h. Only enable if we do not
137 have RTLD_NEXT.
138
139 2005-12-05 11:08 azarah
140
141 * src/getcwd.c, src/libsandbox.c: Add sandbox_on variable to tweak
142 internally if sandbox is on or off.
143
144 2005-12-05 10:10 azarah
145
146 * configure.ac, src/Makefile.am, src/libsandbox.c: Rather check
147 for RTLD_NEXT than glibc. Some other cleanups.
148
149 2005-12-05 09:54 azarah
150
151 * src/libsandbox.c: More bsd fixes.
152
153 2005-12-05 09:53 azarah
154
155 * configure.ac, src/Makefile.am: Add checks for bsd that have
156 dlopen() in libc.
157
158 2005-12-05 09:43 azarah
159
160 * configure.ac: Quoting fixes
161
162 2005-12-05 09:28 azarah
163
164 * configure.ac, src/Makefile.am, src/canonicalize.c,
165 src/libsandbox.c, src/sandbox.c, src/sandbox.h,
166 src/sandbox_futils.c, src/sandbox_utils.c: Rename
167 sandbox_futils.c to sandbox_utils.c. Add gstrndup() and
168 gbasename()
169 to sandbox_utils.c. Add check for glibc, and fixup things to
170 not need glibc
171 only extensions if not needed for versioned symbols.
172
173 2005-12-05 09:02 azarah
174
175 * configure.ac: Make sure the aquired libc is readable.
176
177 2005-12-05 08:13 azarah
178
179 * localdecls.h, scripts/gen_symbol_header.awk,
180 scripts/gen_symbol_version_map.awk: Also add weak symbols.
181
182 2005-12-05 07:17 azarah
183
184 * scripts/gen_symbol_header.awk,
185 scripts/gen_symbol_version_map.awk: Stop processing when we get
186 to the '.symtab' section.
187
188 2005-12-04 20:33 azarah
189
190 * configure.ac: Do not check for compatible malloc(), as we do not
191 care.
192
193 2005-12-03 11:42 azarah
194
195 * scripts/gen_symbol_header.awk, src/libsandbox.c: Change default
196 prefix '__' to '_DEFAULT' suffix to avoid confusion
197 some people seem to have.
198
199 2005-12-02 12:41 azarah
200
201 * configure.ac: Release sandbox-1.2.16.
202 * scripts/dist.sh: Add dist.sh to make my life easier.
203
204 2005-12-02 12:34 azarah
205
206 * src/canonicalize.c: Use mempcpy() instead of __mempcpy(), as svn
207 uClibc hides it.
208
209 2005-12-02 12:32 azarah
210
211 * scripts/gen_symbol_header.awk,
212 scripts/gen_symbol_version_map.awk: Do not re-set VERSIONED_LIBC
213 if already set.
214
215 2005-12-02 12:31 azarah
216
217 * scripts/gen_symbol_header.awk,
218 scripts/gen_symbol_version_map.awk: Do not add unversioned
219 symbols if we have a versioned libc.
220 Do not add duplicates. This is mostly due to unstripped libc ..
221 bug #114200.
222
223 2005-12-02 08:49 azarah
224
225 * src/sandbox.c: Add /dev/shm to write path.
226
227 2005-12-01 21:56 azarah
228
229 * Makefile.am, clean.sh, scripts/clean.sh: Move clean.sh to
230 scripts. Some 'make distcheck' fixes.
231
232 2005-12-01 18:04 azarah
233
234 * configure.ac: Release 1.2.15.
235
236 2005-12-01 17:50 azarah
237
238 * autogen.sh, clean.sh: Update clean.sh to do a 'make distclean'.
239 Add '-n' switch for
240 autogen.sh to skip generating ChangeLog.
241
242 2005-12-01 12:07 azarah
243
244 * ChangeLog, ChangeLog.0, Makefile.am, autogen.sh,
245 scripts/svn2cl.sh, scripts/svn2cl.xsl: Add scripts/svn2cl.*;
246 move ChangeLog and update autogen.sh to
247 generate ChangeLog.
248
249 2005-12-01 12:01 azarah
250
251 * scripts/gen_symbol_header.awk, src/symbols.h.in: Some comment
252 touch-ups.
253
254 2005-12-01 11:56 azarah
255
256 * ChangeLog, src/libsandbox.c, src/symbols.h.in: Wrap mkfifo() as
257 it seems it was missing.
258
259 2005-12-01 11:33 azarah
260
261 * ChangeLog, src/libsandbox.c, src/sandbox.h,
262 src/sandbox_futils.c, src/symbols.h.in: Wrap mknod() as well.
263 Misc cleanups.
264
265 2005-12-01 11:04 azarah
266
267 * ChangeLog, src/sandbox_futils.c: Rather use fstat() to get file
268 size in file_length() than lseek().
269
270 2005-12-01 10:58 azarah
271
272 * ChangeLog, src/sandbox.c: Use egetcwd() in sandbox.c.
273
274 2005-12-01 10:54 azarah
275
276 * ChangeLog, src/sandbox.c: Fixup SANDBOX_ON handling after
277 already running changes.
278
279 2005-12-01 10:45 azarah
280
281 * ChangeLog, src/libsandbox.c: Rename filter_path() to
282 resolve_path() and other renames for clarity.
283
284 2005-12-01 10:40 azarah
285
286 * ChangeLog, configure.ac, src/canonicalize.c, src/libsandbox.c,
287 src/sandbox.h, src/sandbox_futils.c: Cleanup local defines for
288 egetcwd() and erealpath().
289
290 2005-12-01 09:47 azarah
291
292 * ChangeLog, src/Makefile.am, src/symbols.h.in, src/symbols.in:
293 Rename src/symbols.in to src/symbols.h.in.
294
295 2005-12-01 09:46 azarah
296
297 * ChangeLog, localdecls.h, src/Makefile.am, src/canonicalize.c,
298 src/getcwd.c, src/libsandbox.c, src/sandbox.h,
299 src/sandbox_futils.c: Remove the SB_STATIC and including of
300 getcwd.c, etc voodoo, as we new use a
301 symbol map, and all non-exported symbols are local. Cleanup
302 getcwd.c, as
303 the generic getcwd for older 2.4 kernels do not work properly
304 anyhow, and
305 just makes things slower. Some other warning fixes.
306
307 2005-12-01 01:01 azarah
308
309 * scripts/gen_symbol_header.awk: Fixup comments related to strong
310 aliases.
311
312 2005-12-01 01:00 azarah
313
314 * ChangeLog, localdecls.h, scripts/gen_symbol_header.awk: Fix
315 non-versioned libc's to also prepend '__' to internal symbols by
316 using
317 strong aliases.
318
319 2005-11-30 23:27 azarah
320
321 * ChangeLog, configure.ac, configure.in: Rename configure.in to
322 configure.ac.
323
324 2005-11-30 23:21 azarah
325
326 * src/Makefile.am: Small syntax cleanup.
327
328 2005-11-30 23:11 azarah
329
330 * ChangeLog, data/sandbox.bashrc, src/sandbox.c: Only check
331 SANDBOX_ACTIVE, and not its value. More BASH_ENV fixes.
332
333 2005-11-30 22:54 azarah
334
335 * ChangeLog, Makefile.am, configure.in, localdecls.h, scripts,
336 scripts/Makefile.am, scripts/gen_symbol_header.awk,
337 scripts/gen_symbol_version_map.awk, src/Makefile.am,
338 src/getcwd.c, src/libsandbox.c, src/symbols.in: Use versioned
339 symbols on supported libc's for functions we wrap, as well as
340 provide all versions of specific functions. Some syntax
341 cleanups.
342
343 2005-11-30 08:42 azarah
344
345 * localdecls.h, src/sandbox.h: Move dlvsym define. Add
346 symbol_version macros.
347
348 2005-11-28 11:35 azarah
349
350 * ChangeLog, configure.in, src/sandbox.c, src/sandbox_futils.c:
351 Revert 64bit arch test, as we should build the 32bit version
352 without full
353 path checking as well, and add --enable-multilib switch to
354 configure.
355
356 2005-11-28 11:13 azarah
357
358 * ChangeLog, configure.in: Update contact email. Fix quoting.
359
360 2005-11-28 11:04 azarah
361
362 * ChangeLog, configure.in: Detect if we on 64bit arch
363 automatically.
364
365 2005-11-28 10:52 azarah
366
367 * Makefile.am, canonicalize.c, configure.in, data,
368 data/Makefile.am, data/sandbox.bashrc, getcwd.c, libsandbox.c,
369 sandbox.bashrc, sandbox.c, sandbox.h, sandbox_futils.c, src,
370 src/Makefile.am, src/canonicalize.c, src/getcwd.c,
371 src/libsandbox.c, src/sandbox.c, src/sandbox.h,
372 src/sandbox_futils.c, src/symbols.in, symbols.in: Reorder source
373 layout.
374
375 2005-11-28 10:30 azarah
376
377 * ChangeLog, configure.in: Sandbox 1.2.14 release.
378
379 2005-11-28 10:24 azarah
380
381 * ChangeLog, sandbox.c, sandbox.h: Make sure we use our bashrc.
382
383 2005-11-28 10:13 azarah
384
385 * ChangeLog, sandbox.bashrc, sandbox.c: Rather check
386 SANDBOX_ACTIVE if we are already running. Set SANDBOX_ACTIVE
387 to readonly in sandbox.bashrc.
388
389 2005-11-28 10:05 azarah
390
391 * ChangeLog, libsandbox.c, sandbox.c, sandbox.h: Cleanup environ
392 variables.
393
394 2005-11-28 09:55 azarah
395
396 * ChangeLog, getcwd.c: Check generic getcwd()'s return as well for
397 validity, bug #101728.
398
399 2005-11-28 09:50 azarah
400
401 * autogen.sh: Change calling order of autotools.
402
403 2005-11-01 16:02 azarah
404
405 * ChangeLog, libsandbox.c: Do not pass mode to true_open and
406 true_open64 if not needed. Should fix a
407 segfault in some cases.
408
409 2005-11-01 15:41 azarah
410
411 * ChangeLog: Fix wrong version number.
412
413 2005-09-12 07:05 azarah
414
415 * ChangeLog, configure.in: Release sandbox-1.2.13.
416
417 2005-09-12 06:50 azarah
418
419 * ChangeLog, libsandbox.c: Make libsb_fini() do cleanup a bit more
420 complete just in case we get another
421 uClibc 'call preloaded library fini before that of app' issue
422 ... probably
423 will not help much, but we try.
424
425 2005-09-12 06:44 azarah
426
427 * ChangeLog, sandbox.c: Do not handle adding working directory to
428 SANDBOX_WRITE, as portage does it itself.
429
430 2005-09-04 11:17 azarah
431
432 * ChangeLog, libsandbox.c: Also allow symlink() system call to
433 operate on a symlink in a writable path
434 that points to non-writable path, bug #104711.
435
436 2005-08-29 15:39 azarah
437
438 * libsandbox.c: Remove debug code I forgot to remove.
439
440 2005-08-29 15:38 azarah
441
442 * libsandbox.c: Form cleanups.
443
444 2005-08-05 14:49 azarah
445
446 * ChangeLog, configure.in: Release sandbox-1.2.12.
447
448 2005-08-05 14:11 azarah
449
450 * ChangeLog, sandbox.c: Improve error handling for
451 get_sandbox_*_envvar() functions.
452
453 2005-08-05 13:58 azarah
454
455 * ChangeLog, sandbox.c: Remove the tmp_dir variable - we do not
456 need it.
457
458 2005-08-05 13:55 azarah
459
460 * ChangeLog, sandbox.c, sandbox.h: If we are called from the
461 command line, do not care about PORTAGE_TMPDIR,
462 and make the current directory the work directory. Also rename
463 the variable
464 portage_tmp_dir to work_dir.
465
466 2005-08-05 13:33 azarah
467
468 * ChangeLog, libsandbox.c: Do not give an access violation if the
469 access() system call do not have
470 write/read access - it does not actually modify, so we only need
471 to return
472 not being able to write/read. Noted by Andres Loeh
473 <kosmikus@gentoo.org>,
474 bug #101433.
475
476 2005-08-01 14:02 azarah
477
478 * ChangeLog, sandbox.c: Add /dev/tts to write permit, bug #42809.
479
480 2005-08-01 08:08 azarah
481
482 * ChangeLog, libsandbox.c: Add support for SANDBOX_VERBOSE
483 (enabled by default). Adjust SANDBOX_DEBUG
484 to only enable if equal to 1 or yes.
485
486 2005-08-01 07:57 azarah
487
488 * ChangeLog, libsandbox.c: Still do normal log if debugging is
489 requested.
490
491 2005-07-27 18:04 azarah
492
493 * ChangeLog, sandbox.c, sandbox.h, sandbox_futils.c: Do not
494 resolve symlinks in PORTAGE_TMPDIR in sandbox .. we will handle
495 that
496 in libsandbox .. bug #100309.
497
498 2005-07-22 08:13 azarah
499
500 * ChangeLog, sandbox.h: Print all logging to stderr, bug #90343,
501 comment #15, by Zac Medico.
502
503 2005-07-14 11:08 azarah
504
505 * ChangeLog, configure.in: Release sandbox-1.2.11.
506
507 2005-07-14 11:06 azarah
508
509 * ChangeLog, getcwd.c: Fix getcwd, bug #98419.
510
511 2005-07-08 15:49 azarah
512
513 * ChangeLog, sandbox.c: Fix compile error with previous change,
514 and return rather then exit().
515
516 2005-07-08 15:07 azarah
517
518 * ChangeLog, sandbox.c: Remove old logs if present and conflicting
519 with current.
520
521 2005-07-08 14:52 azarah
522
523 * ChangeLog, libsandbox.c, sandbox.c, sandbox_futils.c: Try to
524 cleanup and make error handling/printing consistent.
525
526 2005-07-07 22:58 azarah
527
528 * ChangeLog, libsandbox.c, sandbox.c, sandbox.h: Cleanup
529 access/log printing. Make access printing honour NOCOLOR. Fix
530 log
531 printing's last line not honouring NOCOLOR.
532
533 2005-07-07 22:19 azarah
534
535 * ChangeLog, sandbox.h, sandbox_futils.c: Only declare functions
536 in sandbox_futils.c that are used in libsandbox.c when
537 OUTSIDE_LIBSANDBOX is not defined.
538
539 2005-07-07 22:14 azarah
540
541 * ChangeLog, libsandbox.c, sandbox.c, sandbox_futils.c: Remove
542 unused includes and variables.
543
544 2005-07-07 22:08 azarah
545
546 * ChangeLog, sandbox.c, sandbox.h, sandbox_futils.c: Remove
547 sandbox_dir and co - we are not using it anymore.
548
549 2005-07-07 22:01 azarah
550
551 * ChangeLog, libsandbox.c, sandbox.c, sandbox.h, sandbox_futils.c:
552 Redo the interface of the get_* functions so that we do not leak
553 memory.
554
555 2005-07-07 21:42 azarah
556
557 * ChangeLog, sandbox.c, sandbox.h, sandbox_futils.c: Major cleanup
558 of sandbox_futils.c. Removed most of the functions as we now
559 write to /var/log/sandbox/, so in theory do not need all that.
560
561 2005-07-07 13:01 azarah
562
563 * ChangeLog, libsandbox.c: Fix possible segfault in env init code.
564
565 2005-07-06 21:33 azarah
566
567 * ChangeLog, libsandbox.c: Cleanup init_env_entries() and
568 check_prefixes().
569
570 2005-07-06 19:41 azarah
571
572 * ChangeLog, libsandbox.c: Add check_prefixes() with major cleanup
573 on check_access().
574
575 2005-07-06 18:40 azarah
576
577 * ChangeLog, libsandbox.c: Clean up logging in libsandbox.c, and
578 hopefully make it more consistant.
579
580 2005-07-06 17:35 azarah
581
582 * ChangeLog, libsandbox.c, sandbox.h, sandbox_futils.c: Change log
583 dir to /var/log/sandbox/. Make sure the sandboxed process
584 cannot write to it.
585
586 2005-07-06 00:36 azarah
587
588 * ChangeLog, libsandbox.c, sandbox.c, sandbox.h, sandbox_futils.c:
589 Remove unused 'pids file' code.
590
591 2005-07-06 00:12 azarah
592
593 * libsandbox.c, sandbox.c: Remove unused variables.
594
595 2005-07-03 19:05 azarah
596
597 * sandbox.c: Remove trailing ':' for SANDBOX_PREDICT.
598
599 2005-07-03 18:51 azarah
600
601 * configure.in: * sandbox-1.2.10, try #2.
602
603 2005-07-03 18:48 azarah
604
605 * ChangeLog: * sandbox-1.2.10
606 * sandbox.c: Fix typo in Robin's patch.
607
608 2005-07-03 18:46 azarah
609
610 * ChangeLog, sandbox.c: Add PREDICT items for nss-db, bug #92079.
611 Patch from Robin Johnson.
612
613 2005-06-17 12:32 azarah
614
615 * ChangeLog, sandbox.c: Move get_sandbox_*_envvar() to
616 sandbox_setup_environ(), as its more appropriate there.
617
618 2005-06-17 12:10 azarah
619
620 * ChangeLog, sandbox.c: Remove fooling around with exit codes - we
621 error out on presence of a log anyhow.
622
623 2005-06-14 21:59 azarah
624
625 * libsandbox.c: Label rename for clarity.
626
627 2005-06-14 21:57 azarah
628
629 * ChangeLog, libsandbox.c: Cleanup the fail_nametoolong stuff a
630 bit more.
631
632 2005-06-11 10:04 azarah
633
634 * ChangeLog, libsandbox.c: Remove hopefully the last ld.so.preload
635 bits we do not use anymore.
636
637 2005-06-11 10:01 azarah
638
639 * ChangeLog, libsandbox.c: Remove the unneeded canonicalize()
640 calls in the wrappers - we do it anyhow
641 in check_syscall(). Should speed things up a bit (at least for
642 the getcwd()
643 and long path name test it goes down to under a second, and not
644 10+ seconds
645 like before). Also warn if we skip checking due to the
646 canonicalized path
647 being too long.
648
649 2005-06-11 08:54 azarah
650
651 * ChangeLog, libsandbox.c: More comment/readability cleanups
652
653 2005-06-11 07:25 azarah
654
655 * ChangeLog, canonicalize.c, getcwd.c, libsandbox.c,
656 sandbox_futils.c: Some strncpy/strncat and other cleanups.
657
658 2005-06-09 17:20 azarah
659
660 * ChangeLog, configure.in: * sandbox-1.2.9
661
662 2005-06-09 16:53 azarah
663
664 * ChangeLog, libsandbox.c: Move symlink hack down a bit to try and
665 minimize on the amount of lstat()
666 calls we do.
667
668 2005-06-09 16:47 azarah
669
670 * ChangeLog, libsandbox.c, sandbox.c: Add hack to allow writing to
671 /proc/self/fd (or /dev/fd), bug #91516.
672
673 2005-06-09 15:47 azarah
674
675 * ChangeLog, libsandbox.c, symbols.in: Add wrapper for access()
676 function, bug #85413.
677
678 2005-06-09 15:12 azarah
679
680 * ChangeLog, getcwd.c: Use generic getcwd() implementation from
681 uclibc - should be more portable
682 and looks a bit cleaner.
683
684 2005-06-09 14:42 azarah
685
686 * ChangeLog, getcwd.c, libsandbox.c: Make sure our true_* pointers
687 are initialized to NULL, and that we check for
688 all references that they are valid.
689
690 2005-06-09 14:32 azarah
691
692 * ChangeLog, libsandbox.c: Be default we will fail if the path
693 name we try to canonicalize is too long.
694 This however could cause issues with some things (bug #94630 and
695 #21766), so
696 if fail_nametoolong == 0, canonicalize() will return a null
697 length string and
698 do not fail.
699
700 2005-06-08 13:52 azarah
701
702 * ChangeLog, sandbox.c, sandbox_futils.c: Do not abort if TMPDIR
703 is not valid, but rather use '/tmp', bug #94360. Also
704 make sure we re-export the new TMPDIR environment variable.
705
706 2005-06-08 13:39 azarah
707
708 * libsandbox.c: Whitespace fixes.
709
710 2005-06-08 13:37 azarah
711
712 * ChangeLog, libsandbox.c: Fix incorrect free of non-malloc'd
713 array, bug #92313 and #94020. Fix noted
714 by Marcus D. Hanwell <cryos@gentoo.org>.
715
716 2005-06-08 13:29 azarah
717
718 * ChangeLog, sandbox.c: Add /dev/console to write list, bug #38588.
719
720 2005-06-05 07:45 vapier
721
722 * libsandbox.c: whitespace tweaks
723
724 2005-05-13 15:24 azarah
725
726 * ChangeLog, configure.in: * sandbox-1.2.8
727
728 2005-05-13 15:23 azarah
729
730 * ChangeLog, libsandbox.c, sandbox.c, sandbox.h, sandbox_futils.c:
731 General cleanups.
732
733 2005-05-13 14:18 azarah
734
735 * ChangeLog, libsandbox.c, sandbox.c, sandbox.h: Various
736 LD_PRELOAD cleanups. Do not unset LD_PRELOAD for parent.
737
738 2005-05-13 13:30 azarah
739
740 * ChangeLog, libsandbox.c, sandbox.c, sandbox.h, sandbox_futils.c:
741 Modify get_sandbox_pids_file(), get_sandbox_log() and
742 get_sandbox_debug_log()
743 to use TMPDIR if present in environment.
744
745 2005-05-13 12:53 azarah
746
747 * ChangeLog, sandbox.c: Remove sandbox_log_file from main() as its
748 no longer used.
749
750 2005-05-13 12:52 azarah
751
752 * ChangeLog, sandbox.c, sandbox.h, sandbox_futils.c: Add
753 get_sandbox_debug_log(), and use it (add behaviour similar to
754 SANDBOX_LOG
755 if already exported when sandbox started). Fix
756 get_sandbox_log() and new
757 get_sandbox_debug_log() to not use already exported environment
758 variables if
759 they have '/' in them. Use snprintf()'s instead of strncpy()'s.
760 More
761 SB_PATH_MAX fixes.
762
763 2005-05-12 01:08 azarah
764
765 * sandbox.c: Add comments about memory we do not free at the
766 moment.
767
768 2005-05-12 00:09 azarah
769
770 * ChangeLog, configure.in: * sandbox-1.2.7
771
772 2005-05-12 00:07 azarah
773
774 * ChangeLog, sandbox.c, sandbox.h, sandbox_futils.c: More path
775 limit fixes. Declare SB_BUF_LEN global and use it where needed.
776
777 2005-05-11 23:59 azarah
778
779 * ChangeLog, sandbox_futils.c: Fix paths limited to 255 chars.
780 Fix get_sandbox_dir() returning a string
781 with '(null)' in it if we did not call sandbox with absolute
782 path.
783
784 2005-05-11 23:35 azarah
785
786 * ChangeLog, sandbox.c: Set SANDBOX_ON *before* doing the child's
787 env stuff, else its not set
788 for the child.
789
790 2005-05-11 23:28 azarah
791
792 * ChangeLog, sandbox.c: Remove global preload_adaptable as it is
793 no longer used.
794
795 2005-05-11 23:23 azarah
796
797 * ChangeLog, sandbox.c: Rewrite environment stuff to only be set
798 when execve'ing the child process
799 to try and avoid issues like bug #91541 that causes sandbox to
800 crash if
801 we set LD_PRELOAD sandbox side already.
802
803 2005-05-11 15:52 azarah
804
805 * ChangeLog, sandbox.c: Move print_sandbox_log() up to make things
806 neater.
807
808 2005-05-11 15:48 azarah
809
810 * ChangeLog, sandbox.c: Remove load_preload_libs(), as its not
811 used anymore.
812
813 2005-05-11 15:42 azarah
814
815 * ChangeLog, sandbox.c, sandbox.h: Remove NO_FORK stuff, as its
816 not used, and 'strace -f' works just fine.
817
818 2005-05-11 15:40 azarah
819
820 * sandbox.c: Remove USE_SYSTEM_SHELL stuff, as it is not secure,
821 and not in use (continued).
822
823 2005-05-11 15:39 azarah
824
825 * ChangeLog, sandbox.c, sandbox.h: Remove USE_SYSTEM_SHELL stuff,
826 as it is not secure, and not in use.
827
828 2005-05-11 15:36 azarah
829
830 * ChangeLog, sandbox.c, sandbox.h: Remove ld.so.preload crap - we
831 are not going to use it again.
832
833 2005-05-10 07:38 azarah
834
835 * ChangeLog, sandbox_futils.c: Fix typo in code that checks if we
836 got valid group information, causing a
837 segmentation fault, bug #91637.
838
839 2005-05-10 07:10 azarah
840
841 * Makefile.am: Really remove libctest.c
842
843 2005-05-10 07:09 azarah
844
845 * ChangeLog, configure.in: * sandbox-1.2.6
846
847 2005-05-10 07:08 azarah
848
849 * ChangeLog, sandbox.c: Do not use LD_PRELOAD if it contains
850 libtsocks.so, as it breaks sandbox
851 for some odd reason, bug #91541.
852
853 2005-05-09 18:00 azarah
854
855 * ChangeLog, sandbox.c: Fix typo (sizeof -> strlen).
856
857 2005-05-08 11:27 ferringb
858
859 * ChangeLog, libsandbox.c: rewrote sbcontext caching so it
860 accounts for env changes since lib initialization.
861
862 2005-05-04 23:35 azarah
863
864 * ChangeLog, configure.in, libctest.c: We create libctest.c via
865 configure, so no need to keep it around. Do some
866 cleanup related to libctest.c and libctest during configure.
867
868 2005-05-04 15:33 azarah
869
870 * ChangeLog, libsandbox.c: Add rename support of symlinks pointing
871 to protected files/directories.
872
873 2005-05-04 15:01 azarah
874
875 * ChangeLog, configure.in: * sandbox-1.2.5
876
877 2005-05-04 14:46 azarah
878
879 * ChangeLog, libsandbox.c, sandbox.bashrc, sandbox.c: Do not reset
880 already set LD_PRELOAD when starting sandbox. If LD_PRELOAD is
881 already set, init of the env vars fails for some reason, so do
882 this later on,
883 and do not warn (bug #91431).
884
885 2005-05-03 21:43 azarah
886
887 * ChangeLog, sandbox.bashrc, sandbox.c, sandbox.h: Fixup sandbox
888 and sandbox.bashrc to call bash with the proper .bashrc.
889
890 2005-05-03 11:07 azarah
891
892 * ChangeLog, configure.in: * sandbox-1.2.4
893
894 2005-05-03 11:06 azarah
895
896 * ChangeLog: Add bug # for previous change.
897
898 2005-05-03 10:56 azarah
899
900 * ChangeLog, libsandbox.c: Do not init the env entries with each
901 call, as it creates too many calls to
902 lstat, etc. Should speedup things a bit.
903
904 2005-05-03 09:59 azarah
905
906 * ChangeLog, sandbox.c: Add /dev/pty to default write list.
907 Noticed by Morfic.
908
909 2005-05-02 23:58 vapier
910
911 * sandbox.h: whitespace fixes
912
913 2005-05-02 23:53 vapier
914
915 * localdecls.h: dont define BROKEN_RTLD_NEXT in uClibc
916 * ChangeLog, configure.in, sandbox.h: dlvsym doesnt exist in uClibc
917
918 2005-04-29 22:18 vapier
919
920 * configure.in: use dnl for comments, not #
921
922 2005-04-29 13:37 azarah
923
924 * ChangeLog, configure.in: sandbox-1.2.3
925
926 2005-04-29 00:22 azarah
927
928 * configure.in: I cannot spell, shoot me.
929
930 2005-04-29 00:15 azarah
931
932 * configure.in: Add comment for CXX/F77 puntage
933
934 2005-04-28 23:43 azarah
935
936 * ChangeLog, configure.in: Do not check for (*&#$(* CXX or F77.
937
938 2005-04-28 22:54 vapier
939
940 * configure.in: gawk -> $AWK
941
942 2005-04-28 22:41 azarah
943
944 * ChangeLog, libsandbox.c: Do not append '/' to pathname in
945 filter_path() if it already ends with it.
946
947 2005-04-28 22:21 vapier
948
949 * ChangeLog, configure.in: fix cross-compiling and uclibc and all
950 that jazz
951
952 2005-04-28 22:20 vapier
953
954 * Makefile.am: whitespace fixes and move LIBC_VERSION to config.h
955
956 2005-04-28 22:19 vapier
957
958 * autogen.sh: use automake-1.9 (not that it really matters eh)
959
960 2005-04-28 22:18 vapier
961
962 * clean.sh: remove the symbols header file
963
964 2005-04-28 16:18 azarah
965
966 * ChangeLog, configure.in: * sandbox-1.2.2
967
968 2005-04-28 15:49 azarah
969
970 * ChangeLog, libsandbox.c: Only check for /dev/{null,zero} for
971 unlink hack, else ricers using /dev/shm
972 have issues; bug #90592.
973
974 2005-04-23 21:03 azarah
975
976 * ChangeLog: Add sandbox-1.2 release comment to ChangeLog
977
978 2005-04-23 20:52 azarah
979
980 * ChangeLog, configure.in: sandbox-1.2.1
981
982 2005-04-23 20:44 azarah
983
984 * ChangeLog, Makefile.am, canonicalize.c, getcwd.c, libsandbox.c,
985 localdecls.h, sandbox.h, sandbox_futils.c: Make sure all
986 functions used in libsandbox.c is declared static. Define
987 SB_STATIC in localdecls.h for this. Include sandbox_futils.c
988 rather than
989 linking with its object. Hopefully this will fix bug #90153.
990
991 2005-04-23 06:21 ferringb
992
993 * configure.in: Tagged and bagged 1.2
994
995 2005-03-21 23:30 azarah
996
997 * ChangeLog, libsandbox.c: Allow lchown a symlink in write-allowed
998 path pointing to write-denied target.
999
1000 2005-03-21 08:54 genone
1001
1002 * ChangeLog, libsandbox.c: show resolved symlinks in log
1003
1004 2005-03-14 16:00 genone
1005
1006 * Makefile.am: dropping duplicate symbols
1007
1008 2005-03-14 00:28 azarah
1009
1010 * ChangeLog, Makefile.am, libsandbox.c: Seems -nostdlib was the
1011 problem with the constructor/destructor - remove it
1012 from Makefile.am, and change the constructor/destructor names
1013 again.
1014
1015 2005-03-13 23:29 azarah
1016
1017 * ChangeLog, libsandbox.c: Also rename the _init() and _fini()
1018 declarations.
1019
1020 2005-03-13 23:23 azarah
1021
1022 * ChangeLog, libsandbox.c, sandbox.c: Fixup the
1023 constructor/destructor function names again (they should be
1024 _init()
1025 and _fini() it seems, and not being called caused
1026 sandbox_lib_path to be
1027 unset, and thus breaking the execve() wrapper's LD_PRELOAD
1028 protection).
1029 Add both the path in given SANDBOX_x variable, as well as its
1030 symlink
1031 resolved path in init_env_entries(). Modify filter_path() to be
1032 able to
1033 resolve paths without resolving symlinks, as well as to be able
1034 to resolve
1035 symlinks. Fix a possible segfault in check_access(). Add
1036 symlink resolving
1037 to check_access() resolving bug #31019. Add 'hack' for unlink,
1038 as the fix
1039 for bug #31019 cause access violations if we try to remove a
1040 symlink that is
1041 not in protected path, but points to a protected path. Fix a
1042 memory leak in
1043 sandbox.c (sandbox_pids_file in main()). Fix the realpath()
1044 calls in main()
1045 (sandbox.c) being unchecked. Fix the debug logname not having
1046 the pid in it
1047 (pid_string was uninitialized). General syntax cleanups.
1048
1049 2005-03-09 07:39 ferringb
1050
1051 * ChangeLog, sandbox.c: happy output time.
1052 missing new line.
1053
1054 2005-03-09 07:34 ferringb
1055
1056 * ChangeLog, Makefile.am, configure.in: correct symbols.h building
1057 when libdir !+ "/lib"
1058
1059 2005-03-02 17:30 azarah
1060
1061 * ChangeLog, libsandbox.c: Hack to make sure sandboxed process
1062 cannot remove a device node, bug #79836.
1063
1064 2005-03-02 09:18 azarah
1065
1066 * ChangeLog, Makefile.am: Fix symbols.in not added to dist.
1067
1068 2005-03-02 09:04 azarah
1069
1070 * ChangeLog, Makefile.am, canonicalize.c, getcwd.c, libsandbox.c,
1071 sandbox.c, sandbox.h, sandbox_futils.c: White space fixes.
1072
1073 2005-03-02 09:01 azarah
1074
1075 * ChangeLog, Makefile.am, canonicalize.c, configure.in, getcwd.c,
1076 libsandbox.c, symbols.in: Fix inverse test logic in
1077 canonicalize.c, use a strncpy. Fix gcc warning in
1078 getcwd.c. Add symbols.in and logic to Makefile.am to generate
1079 symbol versions
1080 for glibc and other libc's that use this. Update libsandbox.c
1081 to use these
1082 symbol versions if available. Fix exec wrapper to re-export
1083 LD_PRELOAD if the
1084 process unset it.
1085
1086 2005-03-02 05:48 ferringb
1087
1088 * ChangeLog, libsandbox.c: killed off _init and _fini in favor of
1089 void __attribute__ ((constructor)) init_func and
1090 void __attribute__ ((destructor)) closing_func. _(init|func)
1091 were deprecated.
1092
1093 2005-03-02 05:36 ferringb
1094
1095 * autogen.sh: work damn you.
1096
1097 2004-12-06 21:42 ferringb
1098
1099 * ChangeLog, Makefile.am, canonicalize.c, getcwd.c, libsandbox.c:
1100 hopefully cvs is done being stupid. Compilation fixes, along w/
1101 make dist fix.
1102
1103 2004-12-05 06:14 ferringb
1104
1105 * canonicalize.c, getcwd.c, libsandbox.c: compilation fixups.
1106
1107 2004-12-05 05:42 ferringb
1108
1109 * ChangeLog, Makefile.am, getcwd.c, libsandbox.c: should make
1110 things compile again
1111
1112 2004-12-02 05:22 vapier
1113
1114 * Makefile.am, clean.sh, configure.in, create-localdecls,
1115 libctest.c, localdecls.h: turn create-localdecls into
1116 semi-autotooled
1117
1118 2004-12-02 05:20 vapier
1119
1120 * libsandbox.c: need to include config.h
1121
1122 2004-12-02 04:46 vapier
1123
1124 * Makefile.am, configure.in: touchups
1125
1126 2004-12-02 02:53 vapier
1127
1128 * autogen.sh, clean.sh: scripts to generate/clean build
1129
1130 2004-12-02 02:52 vapier
1131
1132 * aclocal.m4, compile, config.guess, config.h.in, config.sub,
1133 depcomp, install-sh, ltmain.sh, missing: remove generated files
1134
1135 2004-12-02 02:25 ferringb
1136
1137 * ChangeLog, aclocal.m4: stupid libtool.
1138
1139 2004-11-21 02:23 ferringb
1140
1141 * Makefile.am: adjustment so it stops installing a couple of extra
1142 srcs to /usr/share.
1143
1144 2004-11-20 13:21 ferringb
1145
1146 * ChangeLog, Makefile.am, aclocal.m4, configure.in,
1147 sandbox_futils.c: corrections to remove hardcoded paths.
1148 * config.status, libtool: nore should these.
1149
1150 2004-11-20 13:20 ferringb
1151
1152 * config.log: this shouldn't be in cvs.
1153
1154 2004-11-20 13:05 ferringb
1155
1156 * ChangeLog, Makefile.am, sandbox_futils.c: removed the
1157 /usr/lib/portage/ hardcoded reference for bashrc.
1158
1159 2004-11-20 09:26 ferringb
1160
1161 * Makefile.am: nuke the creation of a gz for dist target.
1162
1163 2004-11-20 00:49 ferringb
1164
1165 * Makefile.am: final make dist tweak. stupid bugger.
1166
1167 2004-11-20 00:43 ferringb
1168
1169 * Makefile.am: corrections for make dist, include canocicalize.c
1170
1171 2004-11-20 00:28 ferringb
1172
1173 * Makefile.am: changed the dist target to include building bz2'd
1174 tarballs.
1175
1176 2004-11-20 00:21 ferringb
1177
1178 * COPYING, INSTALL, compile, config.guess, config.sub, depcomp,
1179 install-sh, ltmain.sh, missing: annoying autotool files. stuck
1180 usual copyright stuff w/ gpl v2 notice in COPYING.
1181
1182 2004-11-20 00:17 ferringb
1183
1184 * AUTHORS: a quicky attempt at making authors actually useful.
1185 Fairly complete from what I can see. Basically walked the
1186 changelogs, cvs logs, etc.
1187
1188 2004-11-19 22:11 ferringb
1189
1190 * ChangeLog: entry regarding cvs shift, and the beast being
1191 autotooled.
1192
1193 2004-11-19 22:03 ferringb
1194
1195 * AUTHORS, ChangeLog, Makefile.am, NEWS, README, aclocal.m4,
1196 canonicalize.c, config.h.in, config.log, config.status,
1197 configure.in, create-localdecls, getcwd.c, libctest.c,
1198 libsandbox.c, libtool, sandbox.bashrc, sandbox.c, sandbox.h,
1199 sandbox_futils.c: Initial revision
1200
1201 2004-11-19 22:03
1202
1203 * branches, tags, .: New repository initialized by cvs2svn.

  ViewVC Help
Powered by ViewVC 1.1.20