| 1 | # ChangeLog for Path Sandbox |
1 | # ChangeLog for Path Sandbox |
| 2 | # Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2 |
2 | # Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2 |
| 3 | # $Header$ |
3 | # $Header$ |
|
|
4 | |
|
|
5 | * sandbox-1.2.14 (2005/11/28) |
|
|
6 | |
|
|
7 | 28 Nov 2005 Martin Schlemmer <azarah@gentoo.org> getcwd.c, libsandbox.c, |
|
|
8 | sandbox.c, sandbox.h, sandbox.bashrc: |
|
|
9 | |
|
|
10 | Check generic getcwd()'s return as well for validity, bug #101728. |
|
|
11 | |
|
|
12 | Cleanup environ variables. |
|
|
13 | |
|
|
14 | Rather check SANDBOX_ACTIVE if we are already running. Set SANDBOX_ACTIVE |
|
|
15 | to readonly in sandbox.bashrc. |
|
|
16 | |
|
|
17 | Make sure we use our bashrc. |
|
|
18 | |
|
|
19 | 01 Nov 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
|
|
20 | |
|
|
21 | Do not pass mode to true_open and true_open64 if not needed. Should fix a |
|
|
22 | segfault in some cases. |
|
|
23 | |
|
|
24 | * sandbox-1.2.13 (2005/09/12) |
|
|
25 | |
|
|
26 | 12 Sep 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, libsandbox.c: |
|
|
27 | |
|
|
28 | Do not handle adding working directory to SANDBOX_WRITE, as portage does it |
|
|
29 | itself. |
|
|
30 | |
|
|
31 | Make libsb_fini() do cleanup a bit more complete just in case we get another |
|
|
32 | uClibc 'call preloaded library fini before that of app' issue ... probably |
|
|
33 | will not help much, but we try. |
|
|
34 | |
|
|
35 | 04 Sep 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
|
|
36 | |
|
|
37 | Also allow symlink() system call to operate on a symlink in a writable path |
|
|
38 | that points to non-writable path, bug #104711. |
|
|
39 | |
|
|
40 | * sandbox-1.2.12 (2005/08/05) |
|
|
41 | |
|
|
42 | 05 Aug 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c, |
|
|
43 | sandbox.h: |
|
|
44 | |
|
|
45 | Do not give an access violation if the access() system call do not have |
|
|
46 | write/read access - it does not actually modify, so we only need to return |
|
|
47 | not being able to write/read. Noted by Andres Loeh <kosmikus@gentoo.org>, |
|
|
48 | bug #101433. |
|
|
49 | |
|
|
50 | If we are called from the command line, do not care about PORTAGE_TMPDIR, |
|
|
51 | and make the current directory the work directory. Also rename the variable |
|
|
52 | portage_tmp_dir to work_dir. |
|
|
53 | |
|
|
54 | Remove the tmp_dir variable - we do not need it. |
|
|
55 | |
|
|
56 | Improve error handling for get_sandbox_*_envvar() functions. |
|
|
57 | |
|
|
58 | 01 Aug 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
|
|
59 | |
|
|
60 | Still do normal log if debugging is requested. |
|
|
61 | |
|
|
62 | Add support for SANDBOX_VERBOSE (enabled by default). Adjust SANDBOX_DEBUG |
|
|
63 | to only enable if equal to "1" or "yes". |
|
|
64 | |
|
|
65 | Add /dev/tts to write permit, bug #42809. |
|
|
66 | |
|
|
67 | 27 July 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h, |
|
|
68 | sandbox_futils.c: |
|
|
69 | |
|
|
70 | Do not resolve symlinks in PORTAGE_TMPDIR in sandbox .. we will handle that |
|
|
71 | in libsandbox .. bug #100309. |
|
|
72 | |
|
|
73 | 22 July 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.h: |
|
|
74 | |
|
|
75 | Print all logging to stderr, bug #90343, comment #15, by Zac Medico. |
|
|
76 | |
|
|
77 | * sandbox-1.2.11 (2005/07/14) |
|
|
78 | |
|
|
79 | 14 July 2005; Martin Schlemmer <azarah@gentoo.org> getcwd.c: |
|
|
80 | Fix getcwd, bug #98419. |
|
|
81 | |
|
|
82 | 08 July 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox_futils.c, |
|
|
83 | libsandbox.c: |
|
|
84 | - Try to cleanup and make error handling/printing consistent. |
|
|
85 | - Remove old logs if present and conflicting with current. |
|
|
86 | - Fix compile error with previous change, and return rather then exit(). |
|
|
87 | |
|
|
88 | 07 July 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c, |
|
|
89 | sandbox.h, sandbox_futils.c: |
|
|
90 | - Fix possible segfault in env init code. |
|
|
91 | - Major cleanup of sandbox_futils.c. Removed most of the functions as we now |
|
|
92 | write to /var/log/sandbox/, so in theory do not need all that. |
|
|
93 | - Redo the interface of the get_* functions so that we do not leak memory. |
|
|
94 | - Remove sandbox_dir and co - we are not using it anymore. |
|
|
95 | - Remove unused includes and variables. |
|
|
96 | - Only declare functions in sandbox_futils.c that are used in libsandbox.c when |
|
|
97 | OUTSIDE_LIBSANDBOX is not defined. |
|
|
98 | - Cleanup access/log printing. Make access printing honour NOCOLOR. Fix log |
|
|
99 | printing's last line not honouring NOCOLOR. |
|
|
100 | |
|
|
101 | 06 July 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.h, sandbox_futils.c, |
|
|
102 | libsandbox.c: |
|
|
103 | - Change log dir to /var/log/sandbox/. Make sure the sandboxed process cannot |
|
|
104 | write to it. |
|
|
105 | - Clean up logging in libsandbox.c, and hopefully make it more consistant. |
|
|
106 | - Add check_prefixes() with major cleanup on check_access(). |
|
|
107 | - Cleanup init_env_entries() and check_prefixes(). |
|
|
108 | |
|
|
109 | 05 July 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h, |
|
|
110 | sandbox_futils.c, libsandbox.c: |
|
|
111 | Remove unused 'pids file' code. |
|
|
112 | |
|
|
113 | * sandbox-1.2.10 (2005/07/03) |
|
|
114 | |
|
|
115 | 03 July 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
116 | Add PREDICT items for nss-db, bug #92079. Patch from Robin Johnson. |
|
|
117 | |
|
|
118 | 17 June 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
119 | General cleanups: |
|
|
120 | - Remove fooling around with exit codes - we error out on presence of a log |
|
|
121 | anyhow. |
|
|
122 | - Move get_sandbox_*_envvar() to sandbox_setup_environ(), as its more |
|
|
123 | appropriate there. |
|
|
124 | |
|
|
125 | 12 June 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
|
|
126 | Cleanup the fail_nametoolong stuff a bit more. |
| 4 | |
127 | |
| 5 | 11 June 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
128 | 11 June 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
| 6 | Remove hopefully the last ld.so.preload bits we do not use anymore. |
129 | Remove hopefully the last ld.so.preload bits we do not use anymore. |
| 7 | |
130 | |
| 8 | 11 June 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
131 | 11 June 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |