/[path-sandbox]/trunk/ChangeLog.0
Gentoo

Diff of /trunk/ChangeLog.0

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 35 Revision 120
1# ChangeLog for Path Sandbox 1# ChangeLog for Path Sandbox
2# Copyright 1999-2004 Gentoo Foundation; Distributed under the GPL v2 2# Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2
3# $Header$ 3# $Header$
4
5 11 June 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
6 Remove hopefully the last ld.so.preload bits we do not use anymore.
7
8 11 June 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
9 Remove the unneeded canonicalize() calls in the wrappers - we do it anyhow
10 in check_syscall(). Should speed things up a bit (at least for the getcwd()
11 and long path name test it goes down to under a second, and not 10+ seconds
12 like before). Also warn if we skip checking due to the canonicalized path
13 being too long.
14
15 11 June 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
16 More comment/readability cleanups.
17
18 10 June 2005; Martin Schlemmer <azarah@gentoo.org> canonicalize.c, getcwd.c,
19 sandbox_futils.c, libsandbox.c:
20 Some strncpy/strncat and other cleanups.
21
22* sandbox-1.2.9 (2005/06/09)
23
24 09 June 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
25 Move symlink hack down a bit to try and minimize on the amount of lstat()
26 calls we do.
27
28 09 June 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c:
29 Add hack to allow writing to /proc/self/fd (or /dev/fd), bug #91516.
30
31 09 June 2005; Martin Schlemmer <azarah@gentoo.org> symbols.in, libsandbox.c:
32 Add wrapper for access() function, bug #85413.
33
34 09 June 2005; Martin Schlemmer <azarah@gentoo.org> getcwd.c:
35 Use generic getcwd() implementation from uclibc - should be more portable
36 and looks a bit cleaner.
37
38 09 June 2005; Martin Schlemmer <azarah@gentoo.org> getcwd.c, libsandbox.c:
39 Make sure our true_* pointers are initialized to NULL, and that we check for
40 all references that they are valid.
41
42 09 June 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
43 Be default we will fail if the path name we try to canonicalize is too long.
44 This however could cause issues with some things (bug #94630 and #21766), so
45 if fail_nametoolong == 0, canonicalize() will return a null length string and
46 do not fail.
47
48 08 June 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox_futils.c:
49 Do not abort if TMPDIR is not valid, but rather use '/tmp', bug #94360. Also
50 make sure we re-export the new TMPDIR environment variable.
51
52 08 June 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
53 Fix incorrect free of non-malloc'd array, bug #92313 and #94020. Fix noted
54 by Marcus D. Hanwell <cryos@gentoo.org>.
55
56 08 June 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
57 Add /dev/console to write list, bug #38588.
58
59* sandbox-1.2.8 (2005/05/13)
60
61 13 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c,
62 sandbox.h, sandbox_futils.c:
63 General cleanups.
64
65 13 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c,
66 sandbox.h:
67 Various LD_PRELOAD cleanups. Do not unset LD_PRELOAD for parent.
68
69 13 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c,
70 sandbox.h, sandbox_futils.c:
71 Modify get_sandbox_pids_file(), get_sandbox_log() and get_sandbox_debug_log()
72 to use TMPDIR if present in environment.
73
74 13 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
75 Remove sandbox_log_file from main() as its no longer used.
76
77 13 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h,
78 sandbox_futils.c:
79 Add get_sandbox_debug_log(), and use it (add behaviour similar to SANDBOX_LOG
80 if already exported when sandbox started). Fix get_sandbox_log() and new
81 get_sandbox_debug_log() to not use already exported environment variables if
82 they have '/' in them. Use snprintf()'s instead of strncpy()'s. More
83 SB_PATH_MAX fixes.
84
85* sandbox-1.2.7 (2005/05/12)
86
87 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h,
88 sandbox_futils.c:
89 More path limit fixes. Declare SB_BUF_LEN global and use it where needed.
90
91 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox_futils.c:
92 Fix paths limited to 255 chars. Fix get_sandbox_dir() returning a string
93 with '(null)' in it if we did not call sandbox with absolute path.
94
95 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
96 Set SANDBOX_ON *before* doing the child's env stuff, else its not set
97 for the child.
98
99 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
100 Remove global preload_adaptable as it is no longer used.
101
102 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
103 Rewrite environment stuff to only be set when execve'ing the child process
104 to try and avoid issues like bug #91541 that causes sandbox to crash if
105 we set LD_PRELOAD sandbox side already.
106
107 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
108 Move print_sandbox_log() up to make things neater.
109
110 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
111 Remove load_preload_libs(), as its not used anymore.
112
113 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h:
114 Remove NO_FORK stuff, as its not used, and 'strace -f' works just fine.
115
116 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h:
117 Remove USE_SYSTEM_SHELL stuff, as it is not secure, and not in use.
118
119 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h:
120 Remove ld.so.preload crap - we are not going to use it again.
121
122 10 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox_futils.c:
123 Fix typo in code that checks if we got valid group information, causing a
124 segmentation fault, bug #91637.
125
126* sandbox-1.2.6 (2005/05/10)
127
128 10 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
129 Do not use LD_PRELOAD if it contains libtsocks.so, as it breaks sandbox
130 for some odd reason, bug #91541.
131
132 09 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
133 Fix typo (sizeof -> strlen).
134
135 08 May 2005; Brian Harring <ferringb@gentoo.org> libsandbox.c:
136 rewrote the sbcontext caching code so it accounts for env changes since lib
137 initialization.
138
139 05 May 2005; Martin Schlemmer <azarah@gentoo.org> configure.in, libctest.c:
140 We create libctest.c via configure, so no need to keep it around. Do some
141 cleanup related to libctest.c and libctest during configure.
142
143 04 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
144 Add rename support of symlinks pointing to protected files/directories.
145
146* sandbox-1.2.5 (2005/05/04)
147
148 04 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c,
149 sandbox.bashrc:
150 Do not reset already set LD_PRELOAD when starting sandbox. If LD_PRELOAD is
151 already set, init of the env vars fails for some reason, so do this later on,
152 and do not warn (bug #91431).
153
154 03 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h,
155 sandbox.bashrc:
156 Fixup sandbox and sandbox.bashrc to call bash with the proper .bashrc.
157
158* sandbox-1.2.4 (2005/05/03)
159
160 03 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
161 Do not init the env entries with each call, as it creates too many calls to
162 lstat, etc. Should speedup things a bit, bug #91040.
163
164 03 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
165 Add /dev/pty to default write list. Noticed by Morfic.
166
167 02 May 2005; Mike Frysinger <vapier@gentoo.org> configure.in, localdecls.h,
168 sandbox.h:
169 uClibc doesn't support dlvsym() so add a configure check to make sure it doesn't
170 exist. Also update localdecls.h so BROKEN_RTLD_NEXT isn't defined in uClibc.
171
172* sandbox-1.2.3 (2005/04/29)
173
174 29 Apr 2005; Martin Schlemmer <azarah@gentoo.org> configure.in:
175 Do not check for (*&#$(* CXX or F77.
176
177 29 Apr 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
178 Do not append '/' to pathname in filter_path() if it already ends with it.
179
180 28 Apr 2005; Mike Frysinger <vapier@gentoo.org> Makefile.am, configure.in:
181 With az's help, clean up autotools to work with cross-compiling.
182
183* sandbox-1.2.2 (2005/04/28)
184
185 28 Apr 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
186 Only check for /dev/{null,zero} for unlink hack, else ricers using /dev/shm
187 have issues; bug #90592.
188
189* sandbox-1.2.1 (2005/04/23)
190
191 23 Apr 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, canonicalize.c,
192 getcwd.c, libsandbox.c, localdecls.h, sandbox.h, sandbox_futils.c:
193 Make sure all functions used in libsandbox.c is declared static. Define
194 SB_STATIC in localdecls.h for this. Include sandbox_futils.c rather than
195 linking with its object. Hopefully this will fix bug #90153.
196
197* sandbox-1.2 (2005/04/23)
198
199 22 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
200 Allow lchown a symlink in write-allowed path pointing to write-denied
201 target.
202
203 21 Mar 2005; Marius Mauch <genone@gentoo.org> libsandbox.c:
204 Also show resolved symlink names in the log.
205
206 14 Mar 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, libsandbox.c:
207 Seems -nostdlib was the problem with the constructor/destructor - remove it
208 from Makefile.am, and change the constructor/destructor names again.
209
210 14 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
211 Also rename the _init() and _fini() declarations.
4 212
5 14 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c: 213 14 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c:
6 Fixup the constructor/destructor function names again (they should be _init() 214 Fixup the constructor/destructor function names again (they should be _init()
7 and _fini() it seems, and not being called caused sandbox_lib_path to be 215 and _fini() it seems, and not being called caused sandbox_lib_path to be
8 unset, and thus breaking the execve() wrapper's LD_PRELOAD protection). 216 unset, and thus breaking the execve() wrapper's LD_PRELOAD protection).
Legend:
Removed from v.35  
changed lines
  Added in v.120
  ViewVC Help
Powered by ViewVC 1.1.13