| 1 | # ChangeLog for Path Sandbox |
1 | # ChangeLog for Path Sandbox |
| 2 | # Copyright 1999-2004 Gentoo Foundation; Distributed under the GPL v2 |
2 | # Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2 |
| 3 | # $Header$ |
3 | # $Header$ |
|
|
4 | |
|
|
5 | 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
6 | Remove load_preload_libs(), as its not used anymore. |
|
|
7 | |
|
|
8 | 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h: |
|
|
9 | Remove NO_FORK stuff, as its not used, and 'strace -f' works just fine. |
|
|
10 | |
|
|
11 | 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h: |
|
|
12 | Remove USE_SYSTEM_SHELL stuff, as it is not secure, and not in use. |
|
|
13 | |
|
|
14 | 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h: |
|
|
15 | Remove ld.so.preload crap - we are not going to use it again. |
|
|
16 | |
|
|
17 | 10 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox_futils.c: |
|
|
18 | Fix typo in code that checks if we got valid group information, causing a |
|
|
19 | segmentation fault, bug #91637. |
|
|
20 | |
|
|
21 | * sandbox-1.2.6 (2005/05/10) |
|
|
22 | |
|
|
23 | 10 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
24 | Do not use LD_PRELOAD if it contains libtsocks.so, as it breaks sandbox |
|
|
25 | for some odd reason, bug #91541. |
|
|
26 | |
|
|
27 | 09 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
28 | Fix typo (sizeof -> strlen). |
|
|
29 | |
|
|
30 | 08 May 2005; Brian Harring <ferringb@gentoo.org> libsandbox.c: |
|
|
31 | rewrote the sbcontext caching code so it accounts for env changes since lib |
|
|
32 | initialization. |
|
|
33 | |
|
|
34 | 05 May 2005; Martin Schlemmer <azarah@gentoo.org> configure.in, libctest.c: |
|
|
35 | We create libctest.c via configure, so no need to keep it around. Do some |
|
|
36 | cleanup related to libctest.c and libctest during configure. |
|
|
37 | |
|
|
38 | 04 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
|
|
39 | Add rename support of symlinks pointing to protected files/directories. |
|
|
40 | |
|
|
41 | * sandbox-1.2.5 (2005/05/04) |
|
|
42 | |
|
|
43 | 04 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c, |
|
|
44 | sandbox.bashrc: |
|
|
45 | Do not reset already set LD_PRELOAD when starting sandbox. If LD_PRELOAD is |
|
|
46 | already set, init of the env vars fails for some reason, so do this later on, |
|
|
47 | and do not warn (bug #91431). |
|
|
48 | |
|
|
49 | 03 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h, |
|
|
50 | sandbox.bashrc: |
|
|
51 | Fixup sandbox and sandbox.bashrc to call bash with the proper .bashrc. |
|
|
52 | |
|
|
53 | * sandbox-1.2.4 (2005/05/03) |
|
|
54 | |
|
|
55 | 03 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
|
|
56 | Do not init the env entries with each call, as it creates too many calls to |
|
|
57 | lstat, etc. Should speedup things a bit, bug #91040. |
|
|
58 | |
|
|
59 | 03 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
60 | Add /dev/pty to default write list. Noticed by Morfic. |
|
|
61 | |
|
|
62 | 02 May 2005; Mike Frysinger <vapier@gentoo.org> configure.in, localdecls.h, |
|
|
63 | sandbox.h: |
|
|
64 | uClibc doesn't support dlvsym() so add a configure check to make sure it doesn't |
|
|
65 | exist. Also update localdecls.h so BROKEN_RTLD_NEXT isn't defined in uClibc. |
|
|
66 | |
|
|
67 | * sandbox-1.2.3 (2005/04/29) |
|
|
68 | |
|
|
69 | 29 Apr 2005; Martin Schlemmer <azarah@gentoo.org> configure.in: |
|
|
70 | Do not check for (*&#$(* CXX or F77. |
|
|
71 | |
|
|
72 | 29 Apr 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
|
|
73 | Do not append '/' to pathname in filter_path() if it already ends with it. |
|
|
74 | |
|
|
75 | 28 Apr 2005; Mike Frysinger <vapier@gentoo.org> Makefile.am, configure.in: |
|
|
76 | With az's help, clean up autotools to work with cross-compiling. |
|
|
77 | |
|
|
78 | * sandbox-1.2.2 (2005/04/28) |
| 4 | |
79 | |
| 5 | 28 Apr 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
80 | 28 Apr 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
| 6 | Only check for /dev/{null,zero} for unlink hack, else ricers using /dev/shm |
81 | Only check for /dev/{null,zero} for unlink hack, else ricers using /dev/shm |
| 7 | have issues; bug #90592. |
82 | have issues; bug #90592. |
| 8 | |
83 | |
| 9 | * sandbox-1.2.1 |
84 | * sandbox-1.2.1 (2005/04/23) |
| 10 | |
85 | |
| 11 | 23 Apr 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, canonicalize.c, |
86 | 23 Apr 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, canonicalize.c, |
| 12 | getcwd.c, libsandbox.c, localdecls.h, sandbox.h, sandbox_futils.c: |
87 | getcwd.c, libsandbox.c, localdecls.h, sandbox.h, sandbox_futils.c: |
| 13 | Make sure all functions used in libsandbox.c is declared static. Define |
88 | Make sure all functions used in libsandbox.c is declared static. Define |
| 14 | SB_STATIC in localdecls.h for this. Include sandbox_futils.c rather than |
89 | SB_STATIC in localdecls.h for this. Include sandbox_futils.c rather than |
| 15 | linking with its object. Hopefully this will fix bug #90153. |
90 | linking with its object. Hopefully this will fix bug #90153. |
| 16 | |
91 | |
| 17 | * sandbox-1.2 |
92 | * sandbox-1.2 (2005/04/23) |
| 18 | |
93 | |
| 19 | 22 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
94 | 22 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
| 20 | Allow lchown a symlink in write-allowed path pointing to write-denied |
95 | Allow lchown a symlink in write-allowed path pointing to write-denied |
| 21 | target. |
96 | target. |
| 22 | |
97 | |