| 1 | # ChangeLog for Path Sandbox |
1 | # ChangeLog for Path Sandbox |
| 2 | # Copyright 1999-2004 Gentoo Foundation; Distributed under the GPL v2 |
2 | # Copyright 1999-2004 Gentoo Foundation; Distributed under the GPL v2 |
| 3 | # $Header$ |
3 | # $Header$ |
|
|
4 | |
|
|
5 | 14 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c: |
|
|
6 | Fixup the constructor/destructor function names again (they should be _init() |
|
|
7 | and _fini() it seems, and not being called caused sandbox_lib_path to be |
|
|
8 | unset, and thus breaking the execve() wrapper's LD_PRELOAD protection). |
|
|
9 | Add both the path in given SANDBOX_x variable, as well as its symlink |
|
|
10 | resolved path in init_env_entries(). Modify filter_path() to be able to |
|
|
11 | resolve paths without resolving symlinks, as well as to be able to resolve |
|
|
12 | symlinks. Fix a possible segfault in check_access(). Add symlink resolving |
|
|
13 | to check_access() resolving bug #31019. Add 'hack' for unlink, as the fix |
|
|
14 | for bug #31019 cause access violations if we try to remove a symlink that is |
|
|
15 | not in protected path, but points to a protected path. Fix a memory leak in |
|
|
16 | sandbox.c (sandbox_pids_file in main()). Fix the realpath() calls in main() |
|
|
17 | (sandbox.c) being unchecked. Fix the debug logname not having the pid in it |
|
|
18 | (pid_string was uninitialized). General syntax cleanups. |
|
|
19 | |
|
|
20 | 09 Mar 2005; Brian Harring <ferringb@gentoo.org> sandbox.c: Fixed the |
|
|
21 | infamous "pids file is not a regular file" w/out newline bug. |
|
|
22 | |
|
|
23 | 09 Mar 2005; Brian Harring <ferringb@gentoo.org> Makefile.am, configure.in: |
|
|
24 | Correct libc_version path detection, since it was screwing up if libdir != |
|
|
25 | "/lib/". |
|
|
26 | |
|
|
27 | 02 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
|
|
28 | Hack to make sure sandboxed process cannot remove a device node, bug #79836. |
|
|
29 | |
|
|
30 | 02 Mar 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am: |
|
|
31 | Fix symbols.in not added to dist. |
|
|
32 | |
|
|
33 | 02 Mar 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, canonicalize.c, |
|
|
34 | getcwd.c, libsandbox.c, sandbox.c, sandbox.h, sandbox_futils.c: |
|
|
35 | White space fixes. |
|
|
36 | |
|
|
37 | 02 Mar 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, canonicalize.c, |
|
|
38 | configure.in, getcwd.c, libsandbox.c, symbols.in: |
|
|
39 | Fix inverse test logic in canonicalize.c, use a strncpy. Fix gcc warning in |
|
|
40 | getcwd.c. Add symbols.in and logic to Makefile.am to generate symbol versions |
|
|
41 | for glibc and other libc's that use this. Update libsandbox.c to use these |
|
|
42 | symbol versions if available. Fix exec wrapper to re-export LD_PRELOAD if the |
|
|
43 | process unset it. |
|
|
44 | |
|
|
45 | 01 Mar 2005; Brian Harring <ferringb@gentoo.org> libsandbox.c: |
|
|
46 | killed off _init and _fini in favor of |
|
|
47 | void __attribute__ ((constructor)) init_func and |
|
|
48 | void __attribute__ ((destructor)) closing_func. _(init|func) were deprecated. |
|
|
49 | |
|
|
50 | 06 Dec 2004; Brian Harring <ferringb@gentoo.org> Makefile.am, libsandbox.c, |
|
|
51 | canonicalize.c, getcwd.c: Fixed compilation *again*. Hopefully cvs is done |
|
|
52 | having the hick-ups. |
|
|
53 | |
|
|
54 | 04 Dec 2004; Brian Harring <ferringb@gentoo.org> libsandbox.c, getcwd.c, |
|
|
55 | Makefile.am: Fixed compilation. |
| 4 | |
56 | |
| 5 | 01 Dec 2004; Brian Harring <ferringb@gentoo.org> aclocal.m4: |
57 | 01 Dec 2004; Brian Harring <ferringb@gentoo.org> aclocal.m4: |
| 6 | Gutted the bugger so it stops checking for a c++ and fortran compiler. |
58 | Gutted the bugger so it stops checking for a c++ and fortran compiler. |
| 7 | Do *not* regenerate aclocal.m4 for making a release until a better |
59 | Do *not* regenerate aclocal.m4 for making a release until a better |
| 8 | solution is created. |
60 | solution is created. |
Parent Directory
| 
Revision Log
| 
Patch