/[path-sandbox]/trunk/ChangeLog.0
Gentoo

Diff of /trunk/ChangeLog.0

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 47 Revision 111
1# ChangeLog for Path Sandbox 1# ChangeLog for Path Sandbox
2# Copyright 1999-2004 Gentoo Foundation; Distributed under the GPL v2 2# Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2
3# $Header$ 3# $Header$
4
5 09 June 2005; Martin Schlemmer <azarah@gentoo.org> getcwd.c:
6 Use generic getcwd() implementation from uclibc - should be more portable
7 and looks a bit cleaner.
8
9 09 June 2005; Martin Schlemmer <azarah@gentoo.org> getcwd.c, libsandbox.c:
10 Make sure our true_* pointers are initialized to NULL, and that we check for
11 all references that they are valid.
12
13 09 June 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
14 Be default we will fail if the path name we try to canonicalize is too long.
15 This however could cause issues with some things (bug #94630 and #21766), so
16 if fail_nametoolong == 0, canonicalize() will return a null length string and
17 do not fail.
18
19 08 June 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox_futils.c:
20 Do not abort if TMPDIR is not valid, but rather use '/tmp', bug #94360. Also
21 make sure we re-export the new TMPDIR environment variable.
22
23 08 June 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
24 Fix incorrect free of non-malloc'd array, bug #92313 and #94020. Fix noted
25 by Marcus D. Hanwell <cryos@gentoo.org>.
26
27 08 June 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
28 Add /dev/console to write list, bug #38588.
29
30* sandbox-1.2.8 (2005/05/13)
31
32 13 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c,
33 sandbox.h, sandbox_futils.c:
34 General cleanups.
35
36 13 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c,
37 sandbox.h:
38 Various LD_PRELOAD cleanups. Do not unset LD_PRELOAD for parent.
39
40 13 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c,
41 sandbox.h, sandbox_futils.c:
42 Modify get_sandbox_pids_file(), get_sandbox_log() and get_sandbox_debug_log()
43 to use TMPDIR if present in environment.
44
45 13 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
46 Remove sandbox_log_file from main() as its no longer used.
47
48 13 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h,
49 sandbox_futils.c:
50 Add get_sandbox_debug_log(), and use it (add behaviour similar to SANDBOX_LOG
51 if already exported when sandbox started). Fix get_sandbox_log() and new
52 get_sandbox_debug_log() to not use already exported environment variables if
53 they have '/' in them. Use snprintf()'s instead of strncpy()'s. More
54 SB_PATH_MAX fixes.
55
56* sandbox-1.2.7 (2005/05/12)
57
58 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h,
59 sandbox_futils.c:
60 More path limit fixes. Declare SB_BUF_LEN global and use it where needed.
61
62 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox_futils.c:
63 Fix paths limited to 255 chars. Fix get_sandbox_dir() returning a string
64 with '(null)' in it if we did not call sandbox with absolute path.
65
66 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
67 Set SANDBOX_ON *before* doing the child's env stuff, else its not set
68 for the child.
69
70 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
71 Remove global preload_adaptable as it is no longer used.
72
73 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
74 Rewrite environment stuff to only be set when execve'ing the child process
75 to try and avoid issues like bug #91541 that causes sandbox to crash if
76 we set LD_PRELOAD sandbox side already.
77
78 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
79 Move print_sandbox_log() up to make things neater.
80
81 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
82 Remove load_preload_libs(), as its not used anymore.
83
84 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h:
85 Remove NO_FORK stuff, as its not used, and 'strace -f' works just fine.
86
87 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h:
88 Remove USE_SYSTEM_SHELL stuff, as it is not secure, and not in use.
89
90 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h:
91 Remove ld.so.preload crap - we are not going to use it again.
92
93 10 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox_futils.c:
94 Fix typo in code that checks if we got valid group information, causing a
95 segmentation fault, bug #91637.
96
97* sandbox-1.2.6 (2005/05/10)
98
99 10 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
100 Do not use LD_PRELOAD if it contains libtsocks.so, as it breaks sandbox
101 for some odd reason, bug #91541.
102
103 09 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
104 Fix typo (sizeof -> strlen).
105
106 08 May 2005; Brian Harring <ferringb@gentoo.org> libsandbox.c:
107 rewrote the sbcontext caching code so it accounts for env changes since lib
108 initialization.
109
110 05 May 2005; Martin Schlemmer <azarah@gentoo.org> configure.in, libctest.c:
111 We create libctest.c via configure, so no need to keep it around. Do some
112 cleanup related to libctest.c and libctest during configure.
113
114 04 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
115 Add rename support of symlinks pointing to protected files/directories.
116
117* sandbox-1.2.5 (2005/05/04)
118
119 04 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c,
120 sandbox.bashrc:
121 Do not reset already set LD_PRELOAD when starting sandbox. If LD_PRELOAD is
122 already set, init of the env vars fails for some reason, so do this later on,
123 and do not warn (bug #91431).
124
125 03 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h,
126 sandbox.bashrc:
127 Fixup sandbox and sandbox.bashrc to call bash with the proper .bashrc.
128
129* sandbox-1.2.4 (2005/05/03)
130
131 03 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
132 Do not init the env entries with each call, as it creates too many calls to
133 lstat, etc. Should speedup things a bit, bug #91040.
134
135 03 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
136 Add /dev/pty to default write list. Noticed by Morfic.
137
138 02 May 2005; Mike Frysinger <vapier@gentoo.org> configure.in, localdecls.h,
139 sandbox.h:
140 uClibc doesn't support dlvsym() so add a configure check to make sure it doesn't
141 exist. Also update localdecls.h so BROKEN_RTLD_NEXT isn't defined in uClibc.
142
143* sandbox-1.2.3 (2005/04/29)
144
145 29 Apr 2005; Martin Schlemmer <azarah@gentoo.org> configure.in:
146 Do not check for (*&#$(* CXX or F77.
147
148 29 Apr 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
149 Do not append '/' to pathname in filter_path() if it already ends with it.
150
151 28 Apr 2005; Mike Frysinger <vapier@gentoo.org> Makefile.am, configure.in:
152 With az's help, clean up autotools to work with cross-compiling.
153
154* sandbox-1.2.2 (2005/04/28)
4 155
5 28 Apr 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: 156 28 Apr 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
6 Only check for /dev/{null,zero} for unlink hack, else ricers using /dev/shm 157 Only check for /dev/{null,zero} for unlink hack, else ricers using /dev/shm
7 have issues; bug #90592. 158 have issues; bug #90592.
8 159
9* sandbox-1.2.1 160* sandbox-1.2.1 (2005/04/23)
10 161
11 23 Apr 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, canonicalize.c, 162 23 Apr 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, canonicalize.c,
12 getcwd.c, libsandbox.c, localdecls.h, sandbox.h, sandbox_futils.c: 163 getcwd.c, libsandbox.c, localdecls.h, sandbox.h, sandbox_futils.c:
13 Make sure all functions used in libsandbox.c is declared static. Define 164 Make sure all functions used in libsandbox.c is declared static. Define
14 SB_STATIC in localdecls.h for this. Include sandbox_futils.c rather than 165 SB_STATIC in localdecls.h for this. Include sandbox_futils.c rather than
15 linking with its object. Hopefully this will fix bug #90153. 166 linking with its object. Hopefully this will fix bug #90153.
16 167
17* sandbox-1.2 168* sandbox-1.2 (2005/04/23)
18 169
19 22 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: 170 22 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
20 Allow lchown a symlink in write-allowed path pointing to write-denied 171 Allow lchown a symlink in write-allowed path pointing to write-denied
21 target. 172 target.
22 173
Legend:
Removed from v.47  
changed lines
  Added in v.111
  ViewVC Help
Powered by ViewVC 1.1.13