[path-sandbox] Log of /trunk

Revision 141 - Directory Listing
Modified Thu Jul 7 22:08:17 2005 UTC (7 years, 10 months ago) by azarah

Remove sandbox_dir and co - we are not using it anymore.

Revision 140 - Directory Listing
Modified Thu Jul 7 22:01:14 2005 UTC (7 years, 10 months ago) by azarah

Redo the interface of the get_* functions so that we do not leak memory.

Revision 139 - Directory Listing
Modified Thu Jul 7 21:42:33 2005 UTC (7 years, 10 months ago) by azarah

Major cleanup of sandbox_futils.c.  Removed most of the functions as we now
write to /var/log/sandbox/, so in theory do not need all that.

Revision 138 - Directory Listing
Modified Thu Jul 7 13:01:31 2005 UTC (7 years, 10 months ago) by azarah

Fix possible segfault in env init code.

Revision 137 - Directory Listing
Modified Wed Jul 6 21:33:23 2005 UTC (7 years, 10 months ago) by azarah

Cleanup init_env_entries() and check_prefixes().

Revision 136 - Directory Listing
Modified Wed Jul 6 19:41:26 2005 UTC (7 years, 10 months ago) by azarah

Add check_prefixes() with major cleanup on check_access().

Revision 135 - Directory Listing
Modified Wed Jul 6 18:40:01 2005 UTC (7 years, 10 months ago) by azarah

Clean up logging in libsandbox.c, and hopefully make it more consistant.

Revision 134 - Directory Listing
Modified Wed Jul 6 17:35:30 2005 UTC (7 years, 10 months ago) by azarah

Change log dir to /var/log/sandbox/.  Make sure the sandboxed process cannot write to it.

Revision 133 - Directory Listing
Modified Wed Jul 6 00:36:46 2005 UTC (7 years, 10 months ago) by azarah

Remove unused 'pids file' code.

Revision 132 - Directory Listing
Modified Wed Jul 6 00:12:49 2005 UTC (7 years, 10 months ago) by azarah

Remove unused variables.

Revision 131 - Directory Listing
Modified Sun Jul 3 19:05:34 2005 UTC (7 years, 10 months ago) by azarah

Remove trailing ':' for SANDBOX_PREDICT.

Revision 129 - Directory Listing
Modified Sun Jul 3 18:51:27 2005 UTC (7 years, 10 months ago) by azarah

* sandbox-1.2.10, try #2.

Revision 127 - Directory Listing
Modified Sun Jul 3 18:48:22 2005 UTC (7 years, 10 months ago) by azarah

Fix typo in Robin's patch.

Revision 126 - Directory Listing
Modified Sun Jul 3 18:46:52 2005 UTC (7 years, 10 months ago) by azarah

Add PREDICT items for nss-db, bug #92079.  Patch from Robin Johnson.

Revision 124 - Directory Listing
Modified Fri Jun 17 12:32:02 2005 UTC (7 years, 11 months ago) by azarah

Move get_sandbox_*_envvar() to sandbox_setup_environ(), as its more appropriate there.

Revision 123 - Directory Listing
Modified Fri Jun 17 12:10:14 2005 UTC (7 years, 11 months ago) by azarah

Remove fooling around with exit codes - we error out on presence of a log anyhow.

Revision 122 - Directory Listing
Modified Tue Jun 14 21:59:07 2005 UTC (7 years, 11 months ago) by azarah

Label rename for clarity.

Revision 121 - Directory Listing
Modified Tue Jun 14 21:57:00 2005 UTC (7 years, 11 months ago) by azarah

Cleanup the fail_nametoolong stuff a bit more.

Revision 120 - Directory Listing
Modified Sat Jun 11 10:04:07 2005 UTC (7 years, 11 months ago) by azarah

Remove hopefully the last ld.so.preload bits we do not use anymore.

Revision 119 - Directory Listing
Modified Sat Jun 11 10:01:11 2005 UTC (7 years, 11 months ago) by azarah

Remove the unneeded canonicalize() calls in the wrappers - we do it anyhow
in check_syscall().  Should speed things up a bit (at least for the getcwd()
and long path name test it goes down to under a second, and not 10+ seconds
like before).  Also warn if we skip checking due to the canonicalized path
being too long.

Revision 118 - Directory Listing
Modified Sat Jun 11 08:54:24 2005 UTC (7 years, 11 months ago) by azarah

More comment/readability cleanups

Revision 117 - Directory Listing
Modified Sat Jun 11 07:25:36 2005 UTC (7 years, 11 months ago) by azarah

Some strncpy/strncat and other cleanups.

Revision 114 - Directory Listing
Modified Thu Jun 9 16:53:13 2005 UTC (7 years, 11 months ago) by azarah

Move symlink hack down a bit to try and minimize on the amount of lstat()
calls we do.

Revision 113 - Directory Listing
Modified Thu Jun 9 16:47:21 2005 UTC (7 years, 11 months ago) by azarah

Add hack to allow writing to /proc/self/fd (or /dev/fd), bug #91516.

Revision 112 - Directory Listing
Modified Thu Jun 9 15:47:25 2005 UTC (7 years, 11 months ago) by azarah

Add wrapper for access() function, bug #85413.

Revision 111 - Directory Listing
Modified Thu Jun 9 15:12:20 2005 UTC (7 years, 11 months ago) by azarah

Use generic getcwd() implementation from uclibc - should be more portable
and looks a bit cleaner.

Revision 110 - Directory Listing
Modified Thu Jun 9 14:42:11 2005 UTC (7 years, 11 months ago) by azarah

Make sure our true_* pointers are initialized to NULL, and that we check for
all references that they are valid.

Revision 109 - Directory Listing
Modified Thu Jun 9 14:32:28 2005 UTC (7 years, 11 months ago) by azarah

Be default we will fail if the path name we try to canonicalize is too long.
This however could cause issues with some things (bug #94630 and #21766), so
if fail_nametoolong == 0, canonicalize() will return a null length string and
do not fail.

Revision 108 - Directory Listing
Modified Wed Jun 8 13:52:33 2005 UTC (7 years, 11 months ago) by azarah

Do not abort if TMPDIR is not valid, but rather use '/tmp', bug #94360.  Also
make sure we re-export the new TMPDIR environment variable.

Revision 106 - Directory Listing
Modified Wed Jun 8 13:37:18 2005 UTC (7 years, 11 months ago) by azarah

Fix incorrect free of non-malloc'd array, bug #92313 and #94020.  Fix noted
by Marcus D. Hanwell <cryos@gentoo.org>.

Revision 105 - Directory Listing
Modified Wed Jun 8 13:29:37 2005 UTC (7 years, 11 months ago) by azarah

Add /dev/console to write list, bug #38588.

Revision 100 - Directory Listing
Modified Fri May 13 14:18:05 2005 UTC (8 years ago) by azarah

Various LD_PRELOAD cleanups.  Do not unset LD_PRELOAD for parent.

Revision 99 - Directory Listing
Modified Fri May 13 13:30:51 2005 UTC (8 years ago) by azarah

Modify get_sandbox_pids_file(), get_sandbox_log() and get_sandbox_debug_log()
to use TMPDIR if present in environment.

Revision 98 - Directory Listing
Modified Fri May 13 12:53:15 2005 UTC (8 years ago) by azarah

Remove sandbox_log_file from main() as its no longer used.

Revision 97 - Directory Listing
Modified Fri May 13 12:52:10 2005 UTC (8 years ago) by azarah

Add get_sandbox_debug_log(), and use it (add behaviour similar to SANDBOX_LOG
if already exported when sandbox started).  Fix get_sandbox_log() and new
get_sandbox_debug_log() to not use already exported environment variables if
they have '/' in them.  Use snprintf()'s instead of strncpy()'s.  More
SB_PATH_MAX fixes.

Revision 96 - Directory Listing
Modified Thu May 12 01:08:20 2005 UTC (8 years ago) by azarah

Add comments about memory we do not free at the moment.

Revision 93 - Directory Listing
Modified Thu May 12 00:07:21 2005 UTC (8 years ago) by azarah

More path limit fixes.  Declare SB_BUF_LEN global and use it where needed.

Revision 92 - Directory Listing
Modified Wed May 11 23:59:50 2005 UTC (8 years ago) by azarah

Fix paths limited to 255 chars.  Fix get_sandbox_dir() returning a string
with '(null)' in it if we did not call sandbox with absolute path.

Revision 91 - Directory Listing
Modified Wed May 11 23:35:14 2005 UTC (8 years ago) by azarah

Set SANDBOX_ON *before* doing the child's env stuff, else its not set
for the child.

Revision 90 - Directory Listing
Modified Wed May 11 23:28:42 2005 UTC (8 years ago) by azarah

Remove global preload_adaptable as it is no longer used.

Revision 89 - Directory Listing
Modified Wed May 11 23:23:07 2005 UTC (8 years ago) by azarah

Rewrite environment stuff to only be set when execve'ing the child process
to try and avoid issues like bug #91541 that causes sandbox to crash if
we set LD_PRELOAD sandbox side already.

Revision 88 - Directory Listing
Modified Wed May 11 15:52:08 2005 UTC (8 years ago) by azarah

Move print_sandbox_log() up to make things neater.

Revision 87 - Directory Listing
Modified Wed May 11 15:48:18 2005 UTC (8 years ago) by azarah

Remove load_preload_libs(), as its not used anymore.

Revision 86 - Directory Listing
Modified Wed May 11 15:42:45 2005 UTC (8 years ago) by azarah

Remove NO_FORK stuff, as its not used, and 'strace -f' works just fine.

Revision 85 - Directory Listing
Modified Wed May 11 15:40:51 2005 UTC (8 years ago) by azarah

Remove USE_SYSTEM_SHELL stuff, as it is not secure, and not in use (continued).

Revision 84 - Directory Listing
Modified Wed May 11 15:39:13 2005 UTC (8 years ago) by azarah

Remove USE_SYSTEM_SHELL stuff, as it is not secure, and not in use.

Revision 83 - Directory Listing
Modified Wed May 11 15:36:36 2005 UTC (8 years ago) by azarah

Remove ld.so.preload crap - we are not going to use it again.

Revision 82 - Directory Listing
Modified Tue May 10 07:38:49 2005 UTC (8 years ago) by azarah

Fix typo in code that checks if we got valid group information, causing a
segmentation fault, bug #91637.

Revision 78 - Directory Listing
Modified Tue May 10 07:08:21 2005 UTC (8 years ago) by azarah

Do not use LD_PRELOAD if it contains libtsocks.so, as it breaks sandbox
for some odd reason, bug #91541.

Revision 76 - Directory Listing
Modified Sun May 8 11:27:37 2005 UTC (8 years ago) by ferringb

rewrote sbcontext caching so it accounts for env changes since lib initialization.

Revision 75 - Directory Listing
Modified Wed May 4 23:35:39 2005 UTC (8 years ago) by azarah

We create libctest.c via configure, so no need to keep it around.  Do some
cleanup related to libctest.c and libctest during configure.

Revision 74 - Directory Listing
Modified Wed May 4 15:33:47 2005 UTC (8 years ago) by azarah

Add rename support of symlinks pointing to protected files/directories.

Revision 71 - Directory Listing
Modified Wed May 4 14:46:50 2005 UTC (8 years ago) by azarah

Do not reset already set LD_PRELOAD when starting sandbox.  If LD_PRELOAD is
already set, init of the env vars fails for some reason, so do this later on,
and do not warn (bug #91431).

Revision 70 - Directory Listing
Modified Tue May 3 21:43:50 2005 UTC (8 years ago) by azarah

Fixup sandbox and sandbox.bashrc to call bash with the proper .bashrc.

Revision 66 - Directory Listing
Modified Tue May 3 10:56:19 2005 UTC (8 years ago) by azarah

Do not init the env entries with each call, as it creates too many calls to
lstat, etc.  Should speedup things a bit.

Revision 65 - Directory Listing
Modified Tue May 3 09:59:26 2005 UTC (8 years ago) by azarah

Add /dev/pty to default write list.  Noticed by Morfic.

Revision 63 - Directory Listing
Modified Mon May 2 23:53:52 2005 UTC (8 years ago) by vapier

dont define BROKEN_RTLD_NEXT in uClibc

Revision 56 - Directory Listing
Modified Thu Apr 28 23:43:32 2005 UTC (8 years ago) by azarah

Do not check for (*&#$(* CXX or F77.

Revision 54 - Directory Listing
Modified Thu Apr 28 22:41:57 2005 UTC (8 years ago) by azarah

Do not append '/' to pathname in filter_path() if it already ends with it.

Revision 53 - Directory Listing
Modified Thu Apr 28 22:21:10 2005 UTC (8 years ago) by vapier

fix cross-compiling and uclibc and all that jazz

Revision 52 - Directory Listing
Modified Thu Apr 28 22:20:37 2005 UTC (8 years ago) by vapier

whitespace fixes and move LIBC_VERSION to config.h

Revision 51 - Directory Listing
Modified Thu Apr 28 22:19:19 2005 UTC (8 years ago) by vapier

use automake-1.9 (not that it really matters eh)

Revision 47 - Directory Listing
Modified Thu Apr 28 15:49:30 2005 UTC (8 years ago) by azarah

Only check for /dev/{null,zero} for unlink hack, else ricers using /dev/shm
have issues; bug #90592.

Revision 46 - Directory Listing
Modified Sat Apr 23 21:03:40 2005 UTC (8 years, 1 month ago) by azarah

Add sandbox-1.2 release comment to ChangeLog

Revision 43 - Directory Listing
Modified Sat Apr 23 20:44:15 2005 UTC (8 years, 1 month ago) by azarah

Make sure all functions used in libsandbox.c is declared static.  Define
SB_STATIC in localdecls.h for this.  Include sandbox_futils.c rather than
linking with its object.  Hopefully this will fix bug #90153.

Revision 40 - Directory Listing
Modified Mon Mar 21 23:30:13 2005 UTC (8 years, 2 months ago) by azarah

Allow lchown a symlink in write-allowed path pointing to write-denied target.

Revision 39 - Directory Listing
Modified Mon Mar 21 08:54:02 2005 UTC (8 years, 2 months ago) by genone

show resolved symlinks in log

Revision 38 - Directory Listing
Modified Mon Mar 14 16:00:45 2005 UTC (8 years, 2 months ago) by genone

dropping duplicate symbols

Revision 37 - Directory Listing
Modified Mon Mar 14 00:28:10 2005 UTC (8 years, 2 months ago) by azarah

Seems -nostdlib was the problem with the constructor/destructor - remove it
from Makefile.am, and change the constructor/destructor names again.

Revision 36 - Directory Listing
Modified Sun Mar 13 23:29:28 2005 UTC (8 years, 2 months ago) by azarah

Also rename the _init() and _fini() declarations.

Revision 35 - Directory Listing
Modified Sun Mar 13 23:23:00 2005 UTC (8 years, 2 months ago) by azarah

Fixup the constructor/destructor function names again (they should be _init()
and _fini() it seems, and not being called caused sandbox_lib_path to be
unset, and thus breaking the execve() wrapper's LD_PRELOAD protection).
Add both the path in given SANDBOX_x variable, as well as its symlink
resolved path in init_env_entries().  Modify filter_path() to be able to
resolve paths without resolving symlinks, as well as to be able to resolve
symlinks.  Fix a possible segfault in check_access().  Add symlink resolving
to check_access() resolving bug #31019.  Add 'hack' for unlink, as the fix
for bug #31019 cause access violations if we try to remove a symlink that is
not in protected path, but points to a protected path.  Fix a memory leak in
sandbox.c (sandbox_pids_file in main()).  Fix the realpath() calls in main()
(sandbox.c) being unchecked.  Fix the debug logname not having the pid in it
(pid_string was uninitialized).  General syntax cleanups.

Revision 34 - Directory Listing
Modified Wed Mar 9 07:39:50 2005 UTC (8 years, 2 months ago) by ferringb

happy output time.
missing new line.

Revision 33 - Directory Listing
Modified Wed Mar 9 07:34:30 2005 UTC (8 years, 2 months ago) by ferringb

correct symbols.h building when libdir !+ "/lib"

Revision 32 - Directory Listing
Modified Wed Mar 2 17:30:16 2005 UTC (8 years, 2 months ago) by azarah

Hack to make sure sandboxed process cannot remove a device node, bug #79836.

Revision 31 - Directory Listing
Modified Wed Mar 2 09:18:01 2005 UTC (8 years, 2 months ago) by azarah

Fix symbols.in not added to dist.

Revision 29 - Directory Listing
Modified Wed Mar 2 09:01:36 2005 UTC (8 years, 2 months ago) by azarah

Fix inverse test logic in canonicalize.c, use a strncpy.  Fix gcc warning in
getcwd.c.  Add symbols.in and logic to Makefile.am to generate symbol versions
for glibc and other libc's that use this.  Update libsandbox.c to use these
symbol versions if available.  Fix exec wrapper to re-export LD_PRELOAD if the
process unset it.

Revision 28 - Directory Listing
Modified Wed Mar 2 05:48:12 2005 UTC (8 years, 2 months ago) by ferringb

killed off _init and _fini in favor of
void __attribute__ ((constructor)) init_func and
void __attribute__ ((destructor)) closing_func.  _(init|func) were deprecated.

Revision 26 - Directory Listing
Modified Mon Dec 6 21:42:51 2004 UTC (8 years, 5 months ago) by ferringb

hopefully cvs is done being stupid.  Compilation fixes, along w/ make dist fix.

Revision 24 - Directory Listing
Modified Sun Dec 5 05:42:10 2004 UTC (8 years, 5 months ago) by ferringb

should make things compile again

Revision 23 - Directory Listing
Modified Thu Dec 2 05:22:49 2004 UTC (8 years, 5 months ago) by vapier

turn create-localdecls into semi-autotooled

Revision 22 - Directory Listing
Modified Thu Dec 2 05:20:50 2004 UTC (8 years, 5 months ago) by vapier

need to include config.h

Revision 20 - Directory Listing
Modified Thu Dec 2 02:53:00 2004 UTC (8 years, 5 months ago) by vapier

scripts to generate/clean build

Revision 17 - Directory Listing
Modified Sun Nov 21 02:23:33 2004 UTC (8 years, 6 months ago) by ferringb

adjustment so it stops installing a couple of extra srcs to /usr/share.

Revision 16 - Directory Listing
Modified Sat Nov 20 13:21:37 2004 UTC (8 years, 6 months ago) by ferringb

corrections to remove hardcoded paths.

Revision 14 - Directory Listing
Modified Sat Nov 20 13:20:02 2004 UTC (8 years, 6 months ago) by ferringb

this shouldn't be in cvs.

Revision 13 - Directory Listing
Modified Sat Nov 20 13:05:24 2004 UTC (8 years, 6 months ago) by ferringb

removed the /usr/lib/portage/ hardcoded reference for bashrc.

Revision 12 - Directory Listing
Modified Sat Nov 20 09:26:09 2004 UTC (8 years, 6 months ago) by ferringb

nuke the creation of a gz for dist target.

Revision 11 - Directory Listing
Modified Sat Nov 20 00:49:15 2004 UTC (8 years, 6 months ago) by ferringb

final make dist tweak.  stupid bugger.

Revision 10 - Directory Listing
Modified Sat Nov 20 00:43:01 2004 UTC (8 years, 6 months ago) by ferringb

corrections for make dist, include canocicalize.c

Revision 9 - Directory Listing
Modified Sat Nov 20 00:28:03 2004 UTC (8 years, 6 months ago) by ferringb

changed the dist target to include building bz2'd tarballs.

Revision 8 - Directory Listing
Modified Sat Nov 20 00:21:17 2004 UTC (8 years, 6 months ago) by ferringb

annoying autotool files.  stuck usual copyright stuff w/ gpl v2 notice in COPYING.

Revision 7 - Directory Listing
Modified Sat Nov 20 00:17:06 2004 UTC (8 years, 6 months ago) by ferringb

a quicky attempt at making authors actually useful.  Fairly complete from what I can see.  Basically walked the
changelogs, cvs logs, etc.

Revision 6 - Directory Listing
Modified Fri Nov 19 22:11:38 2004 UTC (8 years, 6 months ago) by ferringb

entry regarding cvs shift, and the beast being autotooled.

Revision 1 - Directory Listing
Added Fri Nov 19 22:03:42 2004 UTC (8 years, 6 months ago) by (unknown author)

New repository initialized by cvs2svn.

	ViewVC Help
Powered by ViewVC 1.1.13