/[path-sandbox]/trunk/ChangeLog.0
Gentoo

Diff of /trunk/ChangeLog.0

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

Revision 47 Revision 97
1# ChangeLog for Path Sandbox 1# ChangeLog for Path Sandbox
2# Copyright 1999-2004 Gentoo Foundation; Distributed under the GPL v2 2# Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2
3# $Header$ 3# $Header$
4
5 13 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h,
6 sandbox_futils.c:
7 Add get_sandbox_debug_log(), and use it (add behaviour similar to SANDBOX_LOG
8 if already exported when sandbox started). Fix get_sandbox_log() and new
9 get_sandbox_debug_log() to not use already exported environment variables if
10 they have '/' in them. Use snprintf()'s instead of strncpy()'s. More
11 SB_PATH_MAX fixes.
12
13* sandbox-1.2.7 (2005/05/12)
14
15 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h,
16 sandbox_futils.c:
17 More path limit fixes. Declare SB_BUF_LEN global and use it where needed.
18
19 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox_futils.c:
20 Fix paths limited to 255 chars. Fix get_sandbox_dir() returning a string
21 with '(null)' in it if we did not call sandbox with absolute path.
22
23 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
24 Set SANDBOX_ON *before* doing the child's env stuff, else its not set
25 for the child.
26
27 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
28 Remove global preload_adaptable as it is no longer used.
29
30 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
31 Rewrite environment stuff to only be set when execve'ing the child process
32 to try and avoid issues like bug #91541 that causes sandbox to crash if
33 we set LD_PRELOAD sandbox side already.
34
35 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
36 Move print_sandbox_log() up to make things neater.
37
38 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
39 Remove load_preload_libs(), as its not used anymore.
40
41 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h:
42 Remove NO_FORK stuff, as its not used, and 'strace -f' works just fine.
43
44 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h:
45 Remove USE_SYSTEM_SHELL stuff, as it is not secure, and not in use.
46
47 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h:
48 Remove ld.so.preload crap - we are not going to use it again.
49
50 10 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox_futils.c:
51 Fix typo in code that checks if we got valid group information, causing a
52 segmentation fault, bug #91637.
53
54* sandbox-1.2.6 (2005/05/10)
55
56 10 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
57 Do not use LD_PRELOAD if it contains libtsocks.so, as it breaks sandbox
58 for some odd reason, bug #91541.
59
60 09 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
61 Fix typo (sizeof -> strlen).
62
63 08 May 2005; Brian Harring <ferringb@gentoo.org> libsandbox.c:
64 rewrote the sbcontext caching code so it accounts for env changes since lib
65 initialization.
66
67 05 May 2005; Martin Schlemmer <azarah@gentoo.org> configure.in, libctest.c:
68 We create libctest.c via configure, so no need to keep it around. Do some
69 cleanup related to libctest.c and libctest during configure.
70
71 04 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
72 Add rename support of symlinks pointing to protected files/directories.
73
74* sandbox-1.2.5 (2005/05/04)
75
76 04 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c,
77 sandbox.bashrc:
78 Do not reset already set LD_PRELOAD when starting sandbox. If LD_PRELOAD is
79 already set, init of the env vars fails for some reason, so do this later on,
80 and do not warn (bug #91431).
81
82 03 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h,
83 sandbox.bashrc:
84 Fixup sandbox and sandbox.bashrc to call bash with the proper .bashrc.
85
86* sandbox-1.2.4 (2005/05/03)
87
88 03 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
89 Do not init the env entries with each call, as it creates too many calls to
90 lstat, etc. Should speedup things a bit, bug #91040.
91
92 03 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c:
93 Add /dev/pty to default write list. Noticed by Morfic.
94
95 02 May 2005; Mike Frysinger <vapier@gentoo.org> configure.in, localdecls.h,
96 sandbox.h:
97 uClibc doesn't support dlvsym() so add a configure check to make sure it doesn't
98 exist. Also update localdecls.h so BROKEN_RTLD_NEXT isn't defined in uClibc.
99
100* sandbox-1.2.3 (2005/04/29)
101
102 29 Apr 2005; Martin Schlemmer <azarah@gentoo.org> configure.in:
103 Do not check for (*&#$(* CXX or F77.
104
105 29 Apr 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
106 Do not append '/' to pathname in filter_path() if it already ends with it.
107
108 28 Apr 2005; Mike Frysinger <vapier@gentoo.org> Makefile.am, configure.in:
109 With az's help, clean up autotools to work with cross-compiling.
110
111* sandbox-1.2.2 (2005/04/28)
4 112
5 28 Apr 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: 113 28 Apr 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
6 Only check for /dev/{null,zero} for unlink hack, else ricers using /dev/shm 114 Only check for /dev/{null,zero} for unlink hack, else ricers using /dev/shm
7 have issues; bug #90592. 115 have issues; bug #90592.
8 116
9* sandbox-1.2.1 117* sandbox-1.2.1 (2005/04/23)
10 118
11 23 Apr 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, canonicalize.c, 119 23 Apr 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, canonicalize.c,
12 getcwd.c, libsandbox.c, localdecls.h, sandbox.h, sandbox_futils.c: 120 getcwd.c, libsandbox.c, localdecls.h, sandbox.h, sandbox_futils.c:
13 Make sure all functions used in libsandbox.c is declared static. Define 121 Make sure all functions used in libsandbox.c is declared static. Define
14 SB_STATIC in localdecls.h for this. Include sandbox_futils.c rather than 122 SB_STATIC in localdecls.h for this. Include sandbox_futils.c rather than
15 linking with its object. Hopefully this will fix bug #90153. 123 linking with its object. Hopefully this will fix bug #90153.
16 124
17* sandbox-1.2 125* sandbox-1.2 (2005/04/23)
18 126
19 22 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: 127 22 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c:
20 Allow lchown a symlink in write-allowed path pointing to write-denied 128 Allow lchown a symlink in write-allowed path pointing to write-denied
21 target. 129 target.
22 130

Legend:
Removed from v.47  
changed lines
  Added in v.97

  ViewVC Help
Powered by ViewVC 1.1.20