[path-sandbox] Log of /trunk

Revision 307 - Directory Listing
Modified Sun Jul 9 17:48:43 2006 UTC (6 years, 10 months ago) by azarah

Apply patch to make reading and writing more reliable.
Patch from Alex Unleashed <unledev@gmail.com>.

Revision 306 - Directory Listing
Modified Sun Jul 9 16:30:14 2006 UTC (6 years, 10 months ago) by azarah

Fix access call strncmp's, patch from
Alex Unleashed <unledev@gmail.com>.

Revision 304 - Directory Listing
Modified Sat Jul 8 23:24:31 2006 UTC (6 years, 10 months ago) by azarah

Free child argv we allocated earlier, as at execve() duplicates
this, so no need to keep it around and waiste more memory.  Make
sure we will not in future free them twice.

Revision 303 - Directory Listing
Modified Sat Jul 8 23:18:59 2006 UTC (6 years, 10 months ago) by azarah

Free child environ we allocated earlier, as at execve() duplicates
this, so no need to keep it around and waiste more memory.

Revision 302 - Directory Listing
Modified Sat Jul 8 23:13:12 2006 UTC (6 years, 10 months ago) by azarah

Rather link libsandbox against librcutil's libtool objects (.lo),
as it should be more portable, but do add the extra fat.

Revision 301 - Directory Listing
Modified Sat Jul 8 21:39:28 2006 UTC (6 years, 10 months ago) by azarah

Add needed changes to get a working sandbox on FreeBSD.  Patch
by Alex Unleashed <unledev@gmail.com>.

Revision 300 - Directory Listing
Modified Sat Jul 8 21:12:12 2006 UTC (6 years, 10 months ago) by azarah

Remove debug printf() that I missed to remove.

Revision 299 - Directory Listing
Modified Sat Jul 8 21:01:51 2006 UTC (6 years, 10 months ago) by azarah

Convert all string list operations to use the str_list_*() macro's.
This allow a nice cleanup of the bash argv stuff, and also actually
add error handling to that part of the code.  Some more cleanup of
the environ stuff.

Revision 298 - Directory Listing
Modified Sat Jul 8 19:53:06 2006 UTC (6 years, 10 months ago) by azarah

Set 'env_ptr = environ;' _after_ we unset and set variables, else the
block could have been reallocated, and leave us using the wrong pointer.
General cleanup of the env handling code.  Free all memory used.

Revision 297 - Directory Listing
Modified Sat Jul 8 16:13:40 2006 UTC (6 years, 10 months ago) by azarah

Fix double free() in sandbox.

Revision 296 - Directory Listing
Modified Fri Jul 7 19:13:17 2006 UTC (6 years, 10 months ago) by azarah

Make sure Mike's sandboxshell mojo do not get recusively called and
only do the whole of it if we are not connected to a terminal.

Revision 293 - Directory Listing
Modified Fri Jul 7 14:24:07 2006 UTC (6 years, 10 months ago) by azarah

Add forgotten Makefile.am for librcutil.

Revision 292 - Directory Listing
Modified Fri Jul 7 14:20:49 2006 UTC (6 years, 10 months ago) by azarah

Release sandbox-1.2.20alpha1.

Revision 291 - Directory Listing
Modified Thu Jul 6 19:18:09 2006 UTC (6 years, 10 months ago) by azarah

Remove uneeded test, as setenv(,,0) do not replace.

Revision 290 - Directory Listing
Modified Thu Jul 6 17:25:46 2006 UTC (6 years, 10 months ago) by azarah

Use debug versions of malloc(), realloc() and calloc().

Revision 289 - Directory Listing
Modified Thu Jul 6 17:19:05 2006 UTC (6 years, 10 months ago) by azarah

Add comment about SANDBOX_WORKDIR.

Revision 288 - Directory Listing
Modified Thu Jul 6 17:02:08 2006 UTC (6 years, 10 months ago) by azarah

Move default SANDBOX_PREDICT value from sandbox.conf to 00default.

Revision 287 - Directory Listing
Modified Thu Jul 6 16:44:48 2006 UTC (6 years, 10 months ago) by azarah

Free some of our custom environment data.

Revision 286 - Directory Listing
Modified Thu Jul 6 16:37:20 2006 UTC (6 years, 10 months ago) by azarah

Set default values via a config file.  Also support sandbox.d
config directory for package specific configuration files.

Revision 285 - Directory Listing
Modified Thu Jul 6 10:56:30 2006 UTC (6 years, 10 months ago) by azarah

Only print info if we have a controlling terminal.

Revision 284 - Directory Listing
Modified Thu Jul 6 09:27:39 2006 UTC (6 years, 10 months ago) by azarah

Fixup color handling.

Revision 283 - Directory Listing
Modified Thu Jul 6 08:49:13 2006 UTC (6 years, 10 months ago) by azarah

Remove last libsandbox-only functions in favour for ones provided
by librcutil.  Setup log_domain properly for debugging.

Revision 282 - Directory Listing
Modified Thu Jul 6 07:46:12 2006 UTC (6 years, 10 months ago) by azarah

Updates for changes to librcutil.

Revision 281 - Directory Listing
Modified Wed Jul 5 17:06:40 2006 UTC (6 years, 10 months ago) by azarah

Fix build failure due to exists() still being needed for libsandbox.

Revision 279 - Directory Listing
Modified Wed Jul 5 16:34:00 2006 UTC (6 years, 10 months ago) by azarah

Rename EINFO, etc to SB_EINFO, etc to not conflict with macros from
librcutil.

Revision 278 - Directory Listing
Modified Wed Jul 5 16:25:28 2006 UTC (6 years, 10 months ago) by azarah

Enable building of librcutil.

Revision 277 - Directory Listing
Modified Wed Jul 5 16:07:11 2006 UTC (6 years, 10 months ago) by azarah

Rename lib to src.

Revision 276 - Directory Listing
Modified Wed Jul 5 16:05:07 2006 UTC (6 years, 10 months ago) by azarah

To not install the librcutils stuff, move it to its own directory where we
can create our own Makefile to build a library of the functions we want.

Revision 275 - Directory Listing
Modified Wed Jul 5 15:50:15 2006 UTC (6 years, 10 months ago) by azarah

External repo's try #3.

Revision 274 - Directory Listing
Modified Wed Jul 5 15:45:05 2006 UTC (6 years, 10 months ago) by azarah

External repo's try #2.

Revision 273 - Directory Listing
Modified Wed Jul 5 15:31:46 2006 UTC (6 years, 10 months ago) by azarah

Remove previous commit.

Revision 272 - Directory Listing
Modified Wed Jul 5 15:30:48 2006 UTC (6 years, 10 months ago) by azarah

Add librcutil as external repo.

Revision 271 - Directory Listing
Modified Wed Jul 5 15:14:07 2006 UTC (6 years, 10 months ago) by azarah

Use is_env_on(ENV_SANDBOX_ON) now that we have is_env_on().

Revision 270 - Directory Listing
Modified Wed Jul 5 15:11:17 2006 UTC (6 years, 10 months ago) by azarah

Abort on possible security breach.

Revision 269 - Directory Listing
Modified Wed Jul 5 15:01:57 2006 UTC (6 years, 10 months ago) by azarah

Set NOCOLOR to 'no', else ebuild.sh do not set COLS, etc.

Revision 268 - Directory Listing
Modified Wed Jul 5 13:50:48 2006 UTC (6 years, 10 months ago) by azarah

Just killing the child with SANDBOX_ABORT do not actually abort the make process
in many cases.  So also kill the offending child, and pray that make will also
abort.  This is really hackish, and we should rather kill the whole process tree,
but currently its too much work (considering that we are in signal context which
probably will make things difficult - not even talking about the bsd's ...), so it
will have to do.

Revision 267 - Directory Listing
Modified Wed Jul 5 11:35:24 2006 UTC (6 years, 10 months ago) by azarah

Make stop_called volatile as its used in signal handler.

Revision 266 - Directory Listing
Modified Wed Jul 5 10:55:54 2006 UTC (6 years, 10 months ago) by azarah

Add /dev/full to write allowed paths, bug #137240.

Revision 265 - Directory Listing
Modified Tue Jul 4 15:32:43 2006 UTC (6 years, 10 months ago) by azarah

Add SANDBOX_INTRACTV logic, and Vapier's sandboxshell mojo.

Revision 264 - Directory Listing
Modified Tue Jul 4 15:10:37 2006 UTC (6 years, 10 months ago) by azarah

Small logic simplification.

Revision 263 - Directory Listing
Modified Tue Jul 4 14:58:16 2006 UTC (6 years, 10 months ago) by azarah

Add is_env_off().  Also check for true/false. Use is_env_*.

Revision 262 - Directory Listing
Modified Tue Jul 4 14:35:18 2006 UTC (6 years, 10 months ago) by azarah

Slightly adjust log format header.

Revision 261 - Directory Listing
Modified Tue Jul 4 14:32:38 2006 UTC (6 years, 10 months ago) by azarah

Theoretically add support to terminate immediately if we had an access violation,
bug #138499.  Uses environment variable SANDBOX_ABORT.

Revision 260 - Directory Listing
Modified Tue Jul 4 14:22:30 2006 UTC (6 years, 10 months ago) by azarah

Add is_env_on(), and some other environ variable defines we will be using.

Revision 259 - Directory Listing
Modified Tue Jul 4 12:44:54 2006 UTC (6 years, 10 months ago) by azarah

Change log format, and add more info, especially cmdline, bug #138501.

Revision 258 - Directory Listing
Modified Fri Jun 30 11:13:24 2006 UTC (6 years, 10 months ago) by azarah

Use EERROR for OOM message instead of EWARN.

Revision 257 - Directory Listing
Modified Fri Jun 30 11:10:35 2006 UTC (6 years, 10 months ago) by azarah

Fix possible huge overflow with logging code.

Revision 256 - Directory Listing
Modified Sat Jun 10 15:08:08 2006 UTC (6 years, 11 months ago) by vapier

Rafal Rzepecki writes:
sandbox's configure script first finds readelf, then ignores the path found
earlier when checking LIBC version. This leads (on my system) to configure
failing with error `configure: error: Unable to determine LIBC VERSION'.
http://bugs.gentoo.org/136284

Revision 253 - Directory Listing
Modified Tue May 9 09:30:16 2006 UTC (7 years ago) by azarah

Do not free buffer returned by getcwd() if it was not obtained by getcwd(),
bug #125701, thanks Mike.

Revision 252 - Directory Listing
Modified Mon May 8 14:15:00 2006 UTC (7 years ago) by azarah

Comment egetcwd() some more, and fix a double-free.

Revision 248 - Directory Listing
Modified Wed May 3 11:18:28 2006 UTC (7 years ago) by azarah

If glibc/kernel side of getcwd() screwed up, return ENAMETOOLONG.

Revision 247 - Directory Listing
Modified Tue Apr 25 08:27:28 2006 UTC (7 years, 1 month ago) by azarah

Fix symbol/map generation on Alpha.  Thanks to report from
Fernando J. Pereda <ferdy@gentoo.org>.

Revision 246 - Directory Listing
Modified Tue Apr 25 08:25:37 2006 UTC (7 years, 1 month ago) by azarah

Try to triple check getcwd() sanity.  Do not think it will help for
bug #125701, but we try.

Revision 245 - Directory Listing
Modified Mon Feb 6 13:49:20 2006 UTC (7 years, 3 months ago) by azarah

Update svn2cl and fix parse issue with latest libxslt-1.1.15.

Revision 244 - Directory Listing
Modified Mon Feb 6 12:45:59 2006 UTC (7 years, 3 months ago) by azarah

Revert last change, and add comment.

Revision 243 - Directory Listing
Modified Mon Feb 6 05:02:51 2006 UTC (7 years, 3 months ago) by vapier

add static/shared library checks to prevent anyone else wasting our time

Revision 242 - Directory Listing
Modified Mon Feb 6 04:11:43 2006 UTC (7 years, 3 months ago) by vapier

ignore more generated files

Revision 241 - Directory Listing
Modified Mon Feb 6 04:11:37 2006 UTC (7 years, 3 months ago) by vapier

force people to use -n if they want to generate stuff

Revision 240 - Directory Listing
Modified Mon Feb 6 04:08:59 2006 UTC (7 years, 3 months ago) by vapier

ignore generated files

Revision 238 - Directory Listing
Modified Mon Feb 6 04:04:10 2006 UTC (7 years, 3 months ago) by vapier

log issues with LIBC PATH a little better

Revision 236 - Directory Listing
Modified Sat Dec 10 11:51:49 2005 UTC (7 years, 5 months ago) by azarah

Add support for readelf from elfutils.

Revision 235 - Directory Listing
Modified Mon Dec 5 22:49:20 2005 UTC (7 years, 5 months ago) by azarah

More configure related cleanups. Define HAVE_RTLD_NEXT
via config.h.

Revision 234 - Directory Listing
Modified Mon Dec 5 17:14:24 2005 UTC (7 years, 5 months ago) by azarah

Indentation fixes and other cleanups.

Revision 232 - Directory Listing
Modified Mon Dec 5 14:35:11 2005 UTC (7 years, 5 months ago) by azarah

We use memcpy() now and no longer mempcpy().

Revision 231 - Directory Listing
Modified Mon Dec 5 14:34:25 2005 UTC (7 years, 5 months ago) by azarah

Fix weak symbols on 32bit glibc where it have a different version.

Revision 229 - Directory Listing
Modified Mon Dec 5 14:07:48 2005 UTC (7 years, 5 months ago) by azarah

Release sandbox-1.2.17.

Revision 227 - Directory Listing
Modified Mon Dec 5 13:55:37 2005 UTC (7 years, 5 months ago) by azarah

Fix regex for newer uclibc that also matches /lib/ld-uClibc.so.0.

Revision 226 - Directory Listing
Modified Mon Dec 5 13:54:04 2005 UTC (7 years, 5 months ago) by azarah

Cleanup RTLD defines.

Revision 225 - Directory Listing
Modified Mon Dec 5 13:41:39 2005 UTC (7 years, 5 months ago) by azarah

Remove getcwd.c, as its no longer used.

Revision 224 - Directory Listing
Modified Mon Dec 5 13:40:36 2005 UTC (7 years, 5 months ago) by azarah

More changes to try and resolve OSes with generic getcwd() implementations.

Revision 223 - Directory Listing
Modified Mon Dec 5 11:24:20 2005 UTC (7 years, 5 months ago) by azarah

FreeBSD have RTLD_NOW, but still have the getcwd() issue.

Revision 222 - Directory Listing
Modified Mon Dec 5 11:18:39 2005 UTC (7 years, 5 months ago) by azarah

Split sandbox_on stuff out to libsandbox.h.  Only enable if we do not
have RTLD_NEXT.

Revision 221 - Directory Listing
Modified Mon Dec 5 11:08:26 2005 UTC (7 years, 5 months ago) by azarah

Add sandbox_on variable to tweak internally if sandbox is on or off.

Revision 220 - Directory Listing
Modified Mon Dec 5 10:10:47 2005 UTC (7 years, 5 months ago) by azarah

Rather check for RTLD_NEXT than glibc.  Some other cleanups.

Revision 218 - Directory Listing
Modified Mon Dec 5 09:53:28 2005 UTC (7 years, 5 months ago) by azarah

Add checks for bsd that have dlopen() in libc.

Revision 216 - Directory Listing
Modified Mon Dec 5 09:28:34 2005 UTC (7 years, 5 months ago) by azarah

Rename sandbox_futils.c to sandbox_utils.c.  Add gstrndup() and gbasename()
to sandbox_utils.c.  Add check for glibc, and fixup things to not need glibc
only extensions if not needed for versioned symbols.

Revision 215 - Directory Listing
Modified Mon Dec 5 09:02:46 2005 UTC (7 years, 5 months ago) by azarah

Make sure the aquired libc is readable.

Revision 214 - Directory Listing
Modified Mon Dec 5 08:13:19 2005 UTC (7 years, 5 months ago) by azarah

Also add weak symbols.

Revision 213 - Directory Listing
Modified Mon Dec 5 07:17:51 2005 UTC (7 years, 5 months ago) by azarah

Stop processing when we get to the '.symtab' section.

Revision 212 - Directory Listing
Modified Sun Dec 4 20:33:05 2005 UTC (7 years, 5 months ago) by azarah

Do not check for compatible malloc(), as we do not care.

Revision 211 - Directory Listing
Modified Sat Dec 3 11:42:38 2005 UTC (7 years, 5 months ago) by azarah

Change default prefix '__' to '_DEFAULT' suffix to avoid confusion
some people seem to have.

Revision 209 - Directory Listing
Modified Fri Dec 2 12:41:44 2005 UTC (7 years, 5 months ago) by azarah

Release sandbox-1.2.16.

Revision 208 - Directory Listing
Modified Fri Dec 2 12:41:18 2005 UTC (7 years, 5 months ago) by azarah

Add dist.sh to make my life easier.

Revision 207 - Directory Listing
Modified Fri Dec 2 12:34:19 2005 UTC (7 years, 5 months ago) by azarah

Use mempcpy() instead of __mempcpy(), as svn uClibc hides it.

Revision 206 - Directory Listing
Modified Fri Dec 2 12:32:53 2005 UTC (7 years, 5 months ago) by azarah

Do not re-set VERSIONED_LIBC if already set.

Revision 205 - Directory Listing
Modified Fri Dec 2 12:31:19 2005 UTC (7 years, 5 months ago) by azarah

Do not add unversioned symbols if we have a versioned libc.
Do not add duplicates.  This is mostly due to unstripped libc .. bug #114200.

Revision 204 - Directory Listing
Modified Fri Dec 2 08:49:38 2005 UTC (7 years, 5 months ago) by azarah

Add /dev/shm to write path.

Revision 203 - Directory Listing
Modified Thu Dec 1 21:56:07 2005 UTC (7 years, 5 months ago) by azarah

Move clean.sh to scripts.  Some 'make distcheck' fixes.

Revision 200 - Directory Listing
Modified Thu Dec 1 17:50:52 2005 UTC (7 years, 5 months ago) by azarah

Update clean.sh to do a 'make distclean'.  Add '-n' switch for
autogen.sh to skip generating ChangeLog.

Revision 199 - Directory Listing
Modified Thu Dec 1 12:07:25 2005 UTC (7 years, 5 months ago) by azarah

Add scripts/svn2cl.*; move ChangeLog and update autogen.sh to
generate ChangeLog.

Revision 198 - Directory Listing
Modified Thu Dec 1 12:01:33 2005 UTC (7 years, 5 months ago) by azarah

Some comment touch-ups.

Revision 197 - Directory Listing
Modified Thu Dec 1 11:56:29 2005 UTC (7 years, 5 months ago) by azarah

Wrap mkfifo() as it seems it was missing.

Revision 196 - Directory Listing
Modified Thu Dec 1 11:33:20 2005 UTC (7 years, 5 months ago) by azarah

Wrap mknod() as well.  Misc cleanups.

Revision 195 - Directory Listing
Modified Thu Dec 1 11:04:31 2005 UTC (7 years, 5 months ago) by azarah

Rather use fstat() to get file size in file_length() than lseek().

Revision 194 - Directory Listing
Modified Thu Dec 1 10:58:54 2005 UTC (7 years, 5 months ago) by azarah

Use egetcwd() in sandbox.c.

Revision 193 - Directory Listing
Modified Thu Dec 1 10:54:12 2005 UTC (7 years, 5 months ago) by azarah

Fixup SANDBOX_ON handling after already running changes.

Revision 192 - Directory Listing
Modified Thu Dec 1 10:45:43 2005 UTC (7 years, 5 months ago) by azarah

Rename filter_path() to resolve_path() and other renames for clarity.

Revision 191 - Directory Listing
Modified Thu Dec 1 10:40:09 2005 UTC (7 years, 5 months ago) by azarah

Cleanup local defines for egetcwd() and erealpath().

Revision 190 - Directory Listing
Modified Thu Dec 1 09:47:42 2005 UTC (7 years, 5 months ago) by azarah

Rename src/symbols.in to src/symbols.h.in.

Revision 189 - Directory Listing
Modified Thu Dec 1 09:46:17 2005 UTC (7 years, 5 months ago) by azarah

Remove the SB_STATIC and including of getcwd.c, etc voodoo, as we new use a
symbol map, and all non-exported symbols are local.  Cleanup getcwd.c, as
the generic getcwd for older 2.4 kernels do not work properly anyhow, and
just makes things slower.  Some other warning fixes.

Revision 188 - Directory Listing
Modified Thu Dec 1 01:01:44 2005 UTC (7 years, 5 months ago) by azarah

Fixup comments related to strong aliases.

Revision 187 - Directory Listing
Modified Thu Dec 1 01:00:40 2005 UTC (7 years, 5 months ago) by azarah

Fix non-versioned libc's to also prepend '__' to internal symbols by using
strong aliases.

Revision 186 - Directory Listing
Modified Wed Nov 30 23:27:59 2005 UTC (7 years, 5 months ago) by azarah

Rename configure.in to configure.ac.

Revision 185 - Directory Listing
Modified Wed Nov 30 23:21:55 2005 UTC (7 years, 5 months ago) by azarah

Small syntax cleanup.

Revision 184 - Directory Listing
Modified Wed Nov 30 23:11:34 2005 UTC (7 years, 5 months ago) by azarah

Only check SANDBOX_ACTIVE, and not its value.  More BASH_ENV fixes.

Revision 183 - Directory Listing
Modified Wed Nov 30 22:54:36 2005 UTC (7 years, 5 months ago) by azarah

Use versioned symbols on supported libc's for functions we wrap, as well as
provide all versions of specific functions.  Some syntax cleanups.

Revision 182 - Directory Listing
Modified Wed Nov 30 08:42:30 2005 UTC (7 years, 5 months ago) by azarah

Move dlvsym define.  Add symbol_version macros.

Revision 181 - Directory Listing
Modified Mon Nov 28 11:35:30 2005 UTC (7 years, 5 months ago) by azarah

Revert 64bit arch test, as we should build the 32bit version without full
path checking as well, and add --enable-multilib switch to configure.

Revision 180 - Directory Listing
Modified Mon Nov 28 11:13:17 2005 UTC (7 years, 5 months ago) by azarah

Update contact email.  Fix quoting.

Revision 179 - Directory Listing
Modified Mon Nov 28 11:04:14 2005 UTC (7 years, 5 months ago) by azarah

Detect if we on 64bit arch automatically.

Revision 178 - Directory Listing
Modified Mon Nov 28 10:52:03 2005 UTC (7 years, 5 months ago) by azarah

Reorder source layout.

Revision 176 - Directory Listing
Modified Mon Nov 28 10:30:39 2005 UTC (7 years, 5 months ago) by azarah

Sandbox 1.2.14 release.

Revision 175 - Directory Listing
Modified Mon Nov 28 10:24:06 2005 UTC (7 years, 5 months ago) by azarah

Make sure we use our bashrc.

Revision 174 - Directory Listing
Modified Mon Nov 28 10:13:15 2005 UTC (7 years, 5 months ago) by azarah

Rather check SANDBOX_ACTIVE if we are already running. Set SANDBOX_ACTIVE
to readonly in sandbox.bashrc.

Revision 173 - Directory Listing
Modified Mon Nov 28 10:05:52 2005 UTC (7 years, 5 months ago) by azarah

Cleanup environ variables.

Revision 172 - Directory Listing
Modified Mon Nov 28 09:55:54 2005 UTC (7 years, 5 months ago) by azarah

Check generic getcwd()'s return as well for validity, bug #101728.

Revision 171 - Directory Listing
Modified Mon Nov 28 09:50:39 2005 UTC (7 years, 5 months ago) by azarah

Change calling order of autotools.

Revision 170 - Directory Listing
Modified Tue Nov 1 16:02:30 2005 UTC (7 years, 6 months ago) by azarah

Do not pass mode to true_open and true_open64 if not needed.  Should fix a
segfault in some cases.

Revision 169 - Directory Listing
Modified Tue Nov 1 15:41:31 2005 UTC (7 years, 6 months ago) by azarah

Fix wrong version number.

Revision 167 - Directory Listing
Modified Mon Sep 12 07:05:41 2005 UTC (7 years, 8 months ago) by azarah

Release sandbox-1.2.13.

Revision 166 - Directory Listing
Modified Mon Sep 12 06:50:53 2005 UTC (7 years, 8 months ago) by azarah

Make libsb_fini() do cleanup a bit more complete just in case we get another
uClibc 'call preloaded library fini before that of app' issue ... probably
will not help much, but we try.

Revision 165 - Directory Listing
Modified Mon Sep 12 06:44:52 2005 UTC (7 years, 8 months ago) by azarah

Do not handle adding working directory to SANDBOX_WRITE, as portage does it itself.

Revision 164 - Directory Listing
Modified Sun Sep 4 11:17:09 2005 UTC (7 years, 8 months ago) by azarah

Also allow symlink() system call to operate on a symlink in a writable path
that points to non-writable path, bug #104711.

Revision 163 - Directory Listing
Modified Mon Aug 29 15:39:19 2005 UTC (7 years, 8 months ago) by azarah

Remove debug code I forgot to remove.

Revision 160 - Directory Listing
Modified Fri Aug 5 14:49:15 2005 UTC (7 years, 9 months ago) by azarah

Release sandbox-1.2.12.

Revision 159 - Directory Listing
Modified Fri Aug 5 14:11:55 2005 UTC (7 years, 9 months ago) by azarah

Improve error handling for get_sandbox_*_envvar() functions.

Revision 158 - Directory Listing
Modified Fri Aug 5 13:58:53 2005 UTC (7 years, 9 months ago) by azarah

Remove the tmp_dir variable - we do not need it.

Revision 157 - Directory Listing
Modified Fri Aug 5 13:55:08 2005 UTC (7 years, 9 months ago) by azarah

If we are called from the command line, do not care about PORTAGE_TMPDIR,
and make the current directory the work directory.  Also rename the variable
portage_tmp_dir to work_dir.

Revision 156 - Directory Listing
Modified Fri Aug 5 13:33:54 2005 UTC (7 years, 9 months ago) by azarah

Do not give an access violation if the access() system call do not have
write/read access - it does not actually modify, so we only need to return
not being able to write/read.  Noted by Andres Loeh <kosmikus@gentoo.org>,
bug #101433.

Revision 155 - Directory Listing
Modified Mon Aug 1 14:02:17 2005 UTC (7 years, 9 months ago) by azarah

Add /dev/tts to write permit, bug #42809.

Revision 154 - Directory Listing
Modified Mon Aug 1 08:08:08 2005 UTC (7 years, 9 months ago) by azarah

Add support for SANDBOX_VERBOSE (enabled by default).  Adjust SANDBOX_DEBUG
to only enable if equal to 1 or yes.

Revision 153 - Directory Listing
Modified Mon Aug 1 07:57:35 2005 UTC (7 years, 9 months ago) by azarah

Still do normal log if debugging is requested.

Revision 152 - Directory Listing
Modified Wed Jul 27 18:04:35 2005 UTC (7 years, 9 months ago) by azarah

Do not resolve symlinks in PORTAGE_TMPDIR in sandbox .. we will handle that
in libsandbox .. bug #100309.

Revision 151 - Directory Listing
Modified Fri Jul 22 08:13:25 2005 UTC (7 years, 10 months ago) by azarah

Print all logging to stderr, bug #90343, comment #15, by Zac Medico.

Revision 149 - Directory Listing
Modified Thu Jul 14 11:08:27 2005 UTC (7 years, 10 months ago) by azarah

Release sandbox-1.2.11.

Revision 148 - Directory Listing
Modified Thu Jul 14 11:06:38 2005 UTC (7 years, 10 months ago) by azarah

Fix getcwd, bug #98419.

Revision 147 - Directory Listing
Modified Fri Jul 8 15:49:23 2005 UTC (7 years, 10 months ago) by azarah

Fix compile error with previous change, and return rather then exit().

Revision 146 - Directory Listing
Modified Fri Jul 8 15:07:50 2005 UTC (7 years, 10 months ago) by azarah

Remove old logs if present and conflicting with current.

Revision 145 - Directory Listing
Modified Fri Jul 8 14:52:26 2005 UTC (7 years, 10 months ago) by azarah

Try to cleanup and make error handling/printing consistent.

Revision 144 - Directory Listing
Modified Thu Jul 7 22:58:16 2005 UTC (7 years, 10 months ago) by azarah

Cleanup access/log printing.  Make access printing honour NOCOLOR.  Fix log
printing's last line not honouring NOCOLOR.

Revision 143 - Directory Listing
Modified Thu Jul 7 22:19:52 2005 UTC (7 years, 10 months ago) by azarah

Only declare functions in sandbox_futils.c that are used in libsandbox.c when
OUTSIDE_LIBSANDBOX is not defined.

Revision 142 - Directory Listing
Modified Thu Jul 7 22:14:57 2005 UTC (7 years, 10 months ago) by azarah

Remove unused includes and variables.

Revision 141 - Directory Listing
Modified Thu Jul 7 22:08:17 2005 UTC (7 years, 10 months ago) by azarah

Remove sandbox_dir and co - we are not using it anymore.

Revision 140 - Directory Listing
Modified Thu Jul 7 22:01:14 2005 UTC (7 years, 10 months ago) by azarah

Redo the interface of the get_* functions so that we do not leak memory.

Revision 139 - Directory Listing
Modified Thu Jul 7 21:42:33 2005 UTC (7 years, 10 months ago) by azarah

Major cleanup of sandbox_futils.c.  Removed most of the functions as we now
write to /var/log/sandbox/, so in theory do not need all that.

Revision 138 - Directory Listing
Modified Thu Jul 7 13:01:31 2005 UTC (7 years, 10 months ago) by azarah

Fix possible segfault in env init code.

Revision 137 - Directory Listing
Modified Wed Jul 6 21:33:23 2005 UTC (7 years, 10 months ago) by azarah

Cleanup init_env_entries() and check_prefixes().

Revision 136 - Directory Listing
Modified Wed Jul 6 19:41:26 2005 UTC (7 years, 10 months ago) by azarah

Add check_prefixes() with major cleanup on check_access().

Revision 135 - Directory Listing
Modified Wed Jul 6 18:40:01 2005 UTC (7 years, 10 months ago) by azarah

Clean up logging in libsandbox.c, and hopefully make it more consistant.

Revision 134 - Directory Listing
Modified Wed Jul 6 17:35:30 2005 UTC (7 years, 10 months ago) by azarah

Change log dir to /var/log/sandbox/.  Make sure the sandboxed process cannot write to it.

Revision 133 - Directory Listing
Modified Wed Jul 6 00:36:46 2005 UTC (7 years, 10 months ago) by azarah

Remove unused 'pids file' code.

Revision 132 - Directory Listing
Modified Wed Jul 6 00:12:49 2005 UTC (7 years, 10 months ago) by azarah

Remove unused variables.

Revision 131 - Directory Listing
Modified Sun Jul 3 19:05:34 2005 UTC (7 years, 10 months ago) by azarah

Remove trailing ':' for SANDBOX_PREDICT.

Revision 129 - Directory Listing
Modified Sun Jul 3 18:51:27 2005 UTC (7 years, 10 months ago) by azarah

* sandbox-1.2.10, try #2.

Revision 127 - Directory Listing
Modified Sun Jul 3 18:48:22 2005 UTC (7 years, 10 months ago) by azarah

Fix typo in Robin's patch.

Revision 126 - Directory Listing
Modified Sun Jul 3 18:46:52 2005 UTC (7 years, 10 months ago) by azarah

Add PREDICT items for nss-db, bug #92079.  Patch from Robin Johnson.

Revision 124 - Directory Listing
Modified Fri Jun 17 12:32:02 2005 UTC (7 years, 11 months ago) by azarah

Move get_sandbox_*_envvar() to sandbox_setup_environ(), as its more appropriate there.

Revision 123 - Directory Listing
Modified Fri Jun 17 12:10:14 2005 UTC (7 years, 11 months ago) by azarah

Remove fooling around with exit codes - we error out on presence of a log anyhow.

Revision 122 - Directory Listing
Modified Tue Jun 14 21:59:07 2005 UTC (7 years, 11 months ago) by azarah

Label rename for clarity.

Revision 121 - Directory Listing
Modified Tue Jun 14 21:57:00 2005 UTC (7 years, 11 months ago) by azarah

Cleanup the fail_nametoolong stuff a bit more.

Revision 120 - Directory Listing
Modified Sat Jun 11 10:04:07 2005 UTC (7 years, 11 months ago) by azarah

Remove hopefully the last ld.so.preload bits we do not use anymore.

Revision 119 - Directory Listing
Modified Sat Jun 11 10:01:11 2005 UTC (7 years, 11 months ago) by azarah

Remove the unneeded canonicalize() calls in the wrappers - we do it anyhow
in check_syscall().  Should speed things up a bit (at least for the getcwd()
and long path name test it goes down to under a second, and not 10+ seconds
like before).  Also warn if we skip checking due to the canonicalized path
being too long.

Revision 118 - Directory Listing
Modified Sat Jun 11 08:54:24 2005 UTC (7 years, 11 months ago) by azarah

More comment/readability cleanups

Revision 117 - Directory Listing
Modified Sat Jun 11 07:25:36 2005 UTC (7 years, 11 months ago) by azarah

Some strncpy/strncat and other cleanups.

Revision 114 - Directory Listing
Modified Thu Jun 9 16:53:13 2005 UTC (7 years, 11 months ago) by azarah

Move symlink hack down a bit to try and minimize on the amount of lstat()
calls we do.

Revision 113 - Directory Listing
Modified Thu Jun 9 16:47:21 2005 UTC (7 years, 11 months ago) by azarah

Add hack to allow writing to /proc/self/fd (or /dev/fd), bug #91516.

Revision 112 - Directory Listing
Modified Thu Jun 9 15:47:25 2005 UTC (7 years, 11 months ago) by azarah

Add wrapper for access() function, bug #85413.

Revision 111 - Directory Listing
Modified Thu Jun 9 15:12:20 2005 UTC (7 years, 11 months ago) by azarah

Use generic getcwd() implementation from uclibc - should be more portable
and looks a bit cleaner.

Revision 110 - Directory Listing
Modified Thu Jun 9 14:42:11 2005 UTC (7 years, 11 months ago) by azarah

Make sure our true_* pointers are initialized to NULL, and that we check for
all references that they are valid.

Revision 109 - Directory Listing
Modified Thu Jun 9 14:32:28 2005 UTC (7 years, 11 months ago) by azarah

Be default we will fail if the path name we try to canonicalize is too long.
This however could cause issues with some things (bug #94630 and #21766), so
if fail_nametoolong == 0, canonicalize() will return a null length string and
do not fail.

Revision 108 - Directory Listing
Modified Wed Jun 8 13:52:33 2005 UTC (7 years, 11 months ago) by azarah

Do not abort if TMPDIR is not valid, but rather use '/tmp', bug #94360.  Also
make sure we re-export the new TMPDIR environment variable.

Revision 106 - Directory Listing
Modified Wed Jun 8 13:37:18 2005 UTC (7 years, 11 months ago) by azarah

Fix incorrect free of non-malloc'd array, bug #92313 and #94020.  Fix noted
by Marcus D. Hanwell <cryos@gentoo.org>.

Revision 105 - Directory Listing
Modified Wed Jun 8 13:29:37 2005 UTC (7 years, 11 months ago) by azarah

Add /dev/console to write list, bug #38588.

Revision 100 - Directory Listing
Modified Fri May 13 14:18:05 2005 UTC (8 years ago) by azarah

Various LD_PRELOAD cleanups.  Do not unset LD_PRELOAD for parent.

Revision 99 - Directory Listing
Modified Fri May 13 13:30:51 2005 UTC (8 years ago) by azarah

Modify get_sandbox_pids_file(), get_sandbox_log() and get_sandbox_debug_log()
to use TMPDIR if present in environment.

Revision 98 - Directory Listing
Modified Fri May 13 12:53:15 2005 UTC (8 years ago) by azarah

Remove sandbox_log_file from main() as its no longer used.

Revision 97 - Directory Listing
Modified Fri May 13 12:52:10 2005 UTC (8 years ago) by azarah

Add get_sandbox_debug_log(), and use it (add behaviour similar to SANDBOX_LOG
if already exported when sandbox started).  Fix get_sandbox_log() and new
get_sandbox_debug_log() to not use already exported environment variables if
they have '/' in them.  Use snprintf()'s instead of strncpy()'s.  More
SB_PATH_MAX fixes.

Revision 96 - Directory Listing
Modified Thu May 12 01:08:20 2005 UTC (8 years ago) by azarah

Add comments about memory we do not free at the moment.

Revision 93 - Directory Listing
Modified Thu May 12 00:07:21 2005 UTC (8 years ago) by azarah

More path limit fixes.  Declare SB_BUF_LEN global and use it where needed.

Revision 92 - Directory Listing
Modified Wed May 11 23:59:50 2005 UTC (8 years ago) by azarah

Fix paths limited to 255 chars.  Fix get_sandbox_dir() returning a string
with '(null)' in it if we did not call sandbox with absolute path.

Revision 91 - Directory Listing
Modified Wed May 11 23:35:14 2005 UTC (8 years ago) by azarah

Set SANDBOX_ON *before* doing the child's env stuff, else its not set
for the child.

Revision 90 - Directory Listing
Modified Wed May 11 23:28:42 2005 UTC (8 years ago) by azarah

Remove global preload_adaptable as it is no longer used.

Revision 89 - Directory Listing
Modified Wed May 11 23:23:07 2005 UTC (8 years ago) by azarah

Rewrite environment stuff to only be set when execve'ing the child process
to try and avoid issues like bug #91541 that causes sandbox to crash if
we set LD_PRELOAD sandbox side already.

Revision 88 - Directory Listing
Modified Wed May 11 15:52:08 2005 UTC (8 years ago) by azarah

Move print_sandbox_log() up to make things neater.

Revision 87 - Directory Listing
Modified Wed May 11 15:48:18 2005 UTC (8 years ago) by azarah

Remove load_preload_libs(), as its not used anymore.

Revision 86 - Directory Listing
Modified Wed May 11 15:42:45 2005 UTC (8 years ago) by azarah

Remove NO_FORK stuff, as its not used, and 'strace -f' works just fine.

Revision 85 - Directory Listing
Modified Wed May 11 15:40:51 2005 UTC (8 years ago) by azarah

Remove USE_SYSTEM_SHELL stuff, as it is not secure, and not in use (continued).

Revision 84 - Directory Listing
Modified Wed May 11 15:39:13 2005 UTC (8 years ago) by azarah

Remove USE_SYSTEM_SHELL stuff, as it is not secure, and not in use.

Revision 83 - Directory Listing
Modified Wed May 11 15:36:36 2005 UTC (8 years ago) by azarah

Remove ld.so.preload crap - we are not going to use it again.

Revision 82 - Directory Listing
Modified Tue May 10 07:38:49 2005 UTC (8 years ago) by azarah

Fix typo in code that checks if we got valid group information, causing a
segmentation fault, bug #91637.

Revision 78 - Directory Listing
Modified Tue May 10 07:08:21 2005 UTC (8 years ago) by azarah

Do not use LD_PRELOAD if it contains libtsocks.so, as it breaks sandbox
for some odd reason, bug #91541.

Revision 76 - Directory Listing
Modified Sun May 8 11:27:37 2005 UTC (8 years ago) by ferringb

rewrote sbcontext caching so it accounts for env changes since lib initialization.

Revision 75 - Directory Listing
Modified Wed May 4 23:35:39 2005 UTC (8 years ago) by azarah

We create libctest.c via configure, so no need to keep it around.  Do some
cleanup related to libctest.c and libctest during configure.

Revision 74 - Directory Listing
Modified Wed May 4 15:33:47 2005 UTC (8 years ago) by azarah

Add rename support of symlinks pointing to protected files/directories.

Revision 71 - Directory Listing
Modified Wed May 4 14:46:50 2005 UTC (8 years ago) by azarah

Do not reset already set LD_PRELOAD when starting sandbox.  If LD_PRELOAD is
already set, init of the env vars fails for some reason, so do this later on,
and do not warn (bug #91431).

Revision 70 - Directory Listing
Modified Tue May 3 21:43:50 2005 UTC (8 years ago) by azarah

Fixup sandbox and sandbox.bashrc to call bash with the proper .bashrc.

Revision 66 - Directory Listing
Modified Tue May 3 10:56:19 2005 UTC (8 years ago) by azarah

Do not init the env entries with each call, as it creates too many calls to
lstat, etc.  Should speedup things a bit.

Revision 65 - Directory Listing
Modified Tue May 3 09:59:26 2005 UTC (8 years ago) by azarah

Add /dev/pty to default write list.  Noticed by Morfic.

Revision 63 - Directory Listing
Modified Mon May 2 23:53:52 2005 UTC (8 years ago) by vapier

dont define BROKEN_RTLD_NEXT in uClibc

Revision 56 - Directory Listing
Modified Thu Apr 28 23:43:32 2005 UTC (8 years ago) by azarah

Do not check for (*&#$(* CXX or F77.

Revision 54 - Directory Listing
Modified Thu Apr 28 22:41:57 2005 UTC (8 years ago) by azarah

Do not append '/' to pathname in filter_path() if it already ends with it.

Revision 53 - Directory Listing
Modified Thu Apr 28 22:21:10 2005 UTC (8 years ago) by vapier

fix cross-compiling and uclibc and all that jazz

Revision 52 - Directory Listing
Modified Thu Apr 28 22:20:37 2005 UTC (8 years ago) by vapier

whitespace fixes and move LIBC_VERSION to config.h

Revision 51 - Directory Listing
Modified Thu Apr 28 22:19:19 2005 UTC (8 years ago) by vapier

use automake-1.9 (not that it really matters eh)

Revision 47 - Directory Listing
Modified Thu Apr 28 15:49:30 2005 UTC (8 years ago) by azarah

Only check for /dev/{null,zero} for unlink hack, else ricers using /dev/shm
have issues; bug #90592.

Revision 46 - Directory Listing
Modified Sat Apr 23 21:03:40 2005 UTC (8 years, 1 month ago) by azarah

Add sandbox-1.2 release comment to ChangeLog

Revision 43 - Directory Listing
Modified Sat Apr 23 20:44:15 2005 UTC (8 years, 1 month ago) by azarah

Make sure all functions used in libsandbox.c is declared static.  Define
SB_STATIC in localdecls.h for this.  Include sandbox_futils.c rather than
linking with its object.  Hopefully this will fix bug #90153.

Revision 40 - Directory Listing
Modified Mon Mar 21 23:30:13 2005 UTC (8 years, 2 months ago) by azarah

Allow lchown a symlink in write-allowed path pointing to write-denied target.

Revision 39 - Directory Listing
Modified Mon Mar 21 08:54:02 2005 UTC (8 years, 2 months ago) by genone

show resolved symlinks in log

Revision 38 - Directory Listing
Modified Mon Mar 14 16:00:45 2005 UTC (8 years, 2 months ago) by genone

dropping duplicate symbols

Revision 37 - Directory Listing
Modified Mon Mar 14 00:28:10 2005 UTC (8 years, 2 months ago) by azarah

Seems -nostdlib was the problem with the constructor/destructor - remove it
from Makefile.am, and change the constructor/destructor names again.

Revision 36 - Directory Listing
Modified Sun Mar 13 23:29:28 2005 UTC (8 years, 2 months ago) by azarah

Also rename the _init() and _fini() declarations.

Revision 35 - Directory Listing
Modified Sun Mar 13 23:23:00 2005 UTC (8 years, 2 months ago) by azarah

Fixup the constructor/destructor function names again (they should be _init()
and _fini() it seems, and not being called caused sandbox_lib_path to be
unset, and thus breaking the execve() wrapper's LD_PRELOAD protection).
Add both the path in given SANDBOX_x variable, as well as its symlink
resolved path in init_env_entries().  Modify filter_path() to be able to
resolve paths without resolving symlinks, as well as to be able to resolve
symlinks.  Fix a possible segfault in check_access().  Add symlink resolving
to check_access() resolving bug #31019.  Add 'hack' for unlink, as the fix
for bug #31019 cause access violations if we try to remove a symlink that is
not in protected path, but points to a protected path.  Fix a memory leak in
sandbox.c (sandbox_pids_file in main()).  Fix the realpath() calls in main()
(sandbox.c) being unchecked.  Fix the debug logname not having the pid in it
(pid_string was uninitialized).  General syntax cleanups.

Revision 34 - Directory Listing
Modified Wed Mar 9 07:39:50 2005 UTC (8 years, 2 months ago) by ferringb

happy output time.
missing new line.

Revision 33 - Directory Listing
Modified Wed Mar 9 07:34:30 2005 UTC (8 years, 2 months ago) by ferringb

correct symbols.h building when libdir !+ "/lib"

Revision 32 - Directory Listing
Modified Wed Mar 2 17:30:16 2005 UTC (8 years, 2 months ago) by azarah

Hack to make sure sandboxed process cannot remove a device node, bug #79836.

Revision 31 - Directory Listing
Modified Wed Mar 2 09:18:01 2005 UTC (8 years, 2 months ago) by azarah

Fix symbols.in not added to dist.

Revision 29 - Directory Listing
Modified Wed Mar 2 09:01:36 2005 UTC (8 years, 2 months ago) by azarah

Fix inverse test logic in canonicalize.c, use a strncpy.  Fix gcc warning in
getcwd.c.  Add symbols.in and logic to Makefile.am to generate symbol versions
for glibc and other libc's that use this.  Update libsandbox.c to use these
symbol versions if available.  Fix exec wrapper to re-export LD_PRELOAD if the
process unset it.

Revision 28 - Directory Listing
Modified Wed Mar 2 05:48:12 2005 UTC (8 years, 2 months ago) by ferringb

killed off _init and _fini in favor of
void __attribute__ ((constructor)) init_func and
void __attribute__ ((destructor)) closing_func.  _(init|func) were deprecated.

Revision 26 - Directory Listing
Modified Mon Dec 6 21:42:51 2004 UTC (8 years, 5 months ago) by ferringb

hopefully cvs is done being stupid.  Compilation fixes, along w/ make dist fix.

Revision 24 - Directory Listing
Modified Sun Dec 5 05:42:10 2004 UTC (8 years, 5 months ago) by ferringb

should make things compile again

Revision 23 - Directory Listing
Modified Thu Dec 2 05:22:49 2004 UTC (8 years, 5 months ago) by vapier

turn create-localdecls into semi-autotooled

Revision 22 - Directory Listing
Modified Thu Dec 2 05:20:50 2004 UTC (8 years, 5 months ago) by vapier

need to include config.h

Revision 20 - Directory Listing
Modified Thu Dec 2 02:53:00 2004 UTC (8 years, 5 months ago) by vapier

scripts to generate/clean build

Revision 17 - Directory Listing
Modified Sun Nov 21 02:23:33 2004 UTC (8 years, 6 months ago) by ferringb

adjustment so it stops installing a couple of extra srcs to /usr/share.

Revision 16 - Directory Listing
Modified Sat Nov 20 13:21:37 2004 UTC (8 years, 6 months ago) by ferringb

corrections to remove hardcoded paths.

Revision 14 - Directory Listing
Modified Sat Nov 20 13:20:02 2004 UTC (8 years, 6 months ago) by ferringb

this shouldn't be in cvs.

Revision 13 - Directory Listing
Modified Sat Nov 20 13:05:24 2004 UTC (8 years, 6 months ago) by ferringb

removed the /usr/lib/portage/ hardcoded reference for bashrc.

Revision 12 - Directory Listing
Modified Sat Nov 20 09:26:09 2004 UTC (8 years, 6 months ago) by ferringb

nuke the creation of a gz for dist target.

Revision 11 - Directory Listing
Modified Sat Nov 20 00:49:15 2004 UTC (8 years, 6 months ago) by ferringb

final make dist tweak.  stupid bugger.

Revision 10 - Directory Listing
Modified Sat Nov 20 00:43:01 2004 UTC (8 years, 6 months ago) by ferringb

corrections for make dist, include canocicalize.c

Revision 9 - Directory Listing
Modified Sat Nov 20 00:28:03 2004 UTC (8 years, 6 months ago) by ferringb

changed the dist target to include building bz2'd tarballs.

Revision 8 - Directory Listing
Modified Sat Nov 20 00:21:17 2004 UTC (8 years, 6 months ago) by ferringb

annoying autotool files.  stuck usual copyright stuff w/ gpl v2 notice in COPYING.

Revision 7 - Directory Listing
Modified Sat Nov 20 00:17:06 2004 UTC (8 years, 6 months ago) by ferringb

a quicky attempt at making authors actually useful.  Fairly complete from what I can see.  Basically walked the
changelogs, cvs logs, etc.

Revision 6 - Directory Listing
Modified Fri Nov 19 22:11:38 2004 UTC (8 years, 6 months ago) by ferringb

entry regarding cvs shift, and the beast being autotooled.

Revision 1 - Directory Listing
Added Fri Nov 19 22:03:42 2004 UTC (8 years, 6 months ago) by (unknown author)

New repository initialized by cvs2svn.

	ViewVC Help
Powered by ViewVC 1.1.13