| 1 | # ChangeLog for Path Sandbox |
1 | # ChangeLog for Path Sandbox |
| 2 | # Copyright 1999-2004 Gentoo Foundation; Distributed under the GPL v2 |
2 | # Copyright 1999-2005 Gentoo Foundation; Distributed under the GPL v2 |
| 3 | # $Header$ |
3 | # $Header$ |
|
|
4 | |
|
|
5 | 13 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
6 | Remove sandbox_log_file from main() as its no longer used. |
|
|
7 | |
|
|
8 | 13 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h, |
|
|
9 | sandbox_futils.c: |
|
|
10 | Add get_sandbox_debug_log(), and use it (add behaviour similar to SANDBOX_LOG |
|
|
11 | if already exported when sandbox started). Fix get_sandbox_log() and new |
|
|
12 | get_sandbox_debug_log() to not use already exported environment variables if |
|
|
13 | they have '/' in them. Use snprintf()'s instead of strncpy()'s. More |
|
|
14 | SB_PATH_MAX fixes. |
|
|
15 | |
|
|
16 | * sandbox-1.2.7 (2005/05/12) |
|
|
17 | |
|
|
18 | 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h, |
|
|
19 | sandbox_futils.c: |
|
|
20 | More path limit fixes. Declare SB_BUF_LEN global and use it where needed. |
|
|
21 | |
|
|
22 | 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox_futils.c: |
|
|
23 | Fix paths limited to 255 chars. Fix get_sandbox_dir() returning a string |
|
|
24 | with '(null)' in it if we did not call sandbox with absolute path. |
|
|
25 | |
|
|
26 | 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
27 | Set SANDBOX_ON *before* doing the child's env stuff, else its not set |
|
|
28 | for the child. |
|
|
29 | |
|
|
30 | 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
31 | Remove global preload_adaptable as it is no longer used. |
|
|
32 | |
|
|
33 | 12 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
34 | Rewrite environment stuff to only be set when execve'ing the child process |
|
|
35 | to try and avoid issues like bug #91541 that causes sandbox to crash if |
|
|
36 | we set LD_PRELOAD sandbox side already. |
|
|
37 | |
|
|
38 | 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
39 | Move print_sandbox_log() up to make things neater. |
|
|
40 | |
|
|
41 | 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
42 | Remove load_preload_libs(), as its not used anymore. |
|
|
43 | |
|
|
44 | 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h: |
|
|
45 | Remove NO_FORK stuff, as its not used, and 'strace -f' works just fine. |
|
|
46 | |
|
|
47 | 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h: |
|
|
48 | Remove USE_SYSTEM_SHELL stuff, as it is not secure, and not in use. |
|
|
49 | |
|
|
50 | 11 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h: |
|
|
51 | Remove ld.so.preload crap - we are not going to use it again. |
|
|
52 | |
|
|
53 | 10 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox_futils.c: |
|
|
54 | Fix typo in code that checks if we got valid group information, causing a |
|
|
55 | segmentation fault, bug #91637. |
|
|
56 | |
|
|
57 | * sandbox-1.2.6 (2005/05/10) |
|
|
58 | |
|
|
59 | 10 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
60 | Do not use LD_PRELOAD if it contains libtsocks.so, as it breaks sandbox |
|
|
61 | for some odd reason, bug #91541. |
|
|
62 | |
|
|
63 | 09 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
64 | Fix typo (sizeof -> strlen). |
|
|
65 | |
|
|
66 | 08 May 2005; Brian Harring <ferringb@gentoo.org> libsandbox.c: |
|
|
67 | rewrote the sbcontext caching code so it accounts for env changes since lib |
|
|
68 | initialization. |
|
|
69 | |
|
|
70 | 05 May 2005; Martin Schlemmer <azarah@gentoo.org> configure.in, libctest.c: |
|
|
71 | We create libctest.c via configure, so no need to keep it around. Do some |
|
|
72 | cleanup related to libctest.c and libctest during configure. |
|
|
73 | |
|
|
74 | 04 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
|
|
75 | Add rename support of symlinks pointing to protected files/directories. |
|
|
76 | |
|
|
77 | * sandbox-1.2.5 (2005/05/04) |
|
|
78 | |
|
|
79 | 04 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c, |
|
|
80 | sandbox.bashrc: |
|
|
81 | Do not reset already set LD_PRELOAD when starting sandbox. If LD_PRELOAD is |
|
|
82 | already set, init of the env vars fails for some reason, so do this later on, |
|
|
83 | and do not warn (bug #91431). |
|
|
84 | |
|
|
85 | 03 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c, sandbox.h, |
|
|
86 | sandbox.bashrc: |
|
|
87 | Fixup sandbox and sandbox.bashrc to call bash with the proper .bashrc. |
|
|
88 | |
|
|
89 | * sandbox-1.2.4 (2005/05/03) |
|
|
90 | |
|
|
91 | 03 May 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
|
|
92 | Do not init the env entries with each call, as it creates too many calls to |
|
|
93 | lstat, etc. Should speedup things a bit, bug #91040. |
|
|
94 | |
|
|
95 | 03 May 2005; Martin Schlemmer <azarah@gentoo.org> sandbox.c: |
|
|
96 | Add /dev/pty to default write list. Noticed by Morfic. |
|
|
97 | |
|
|
98 | 02 May 2005; Mike Frysinger <vapier@gentoo.org> configure.in, localdecls.h, |
|
|
99 | sandbox.h: |
|
|
100 | uClibc doesn't support dlvsym() so add a configure check to make sure it doesn't |
|
|
101 | exist. Also update localdecls.h so BROKEN_RTLD_NEXT isn't defined in uClibc. |
|
|
102 | |
|
|
103 | * sandbox-1.2.3 (2005/04/29) |
|
|
104 | |
|
|
105 | 29 Apr 2005; Martin Schlemmer <azarah@gentoo.org> configure.in: |
|
|
106 | Do not check for (*&#$(* CXX or F77. |
|
|
107 | |
|
|
108 | 29 Apr 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
|
|
109 | Do not append '/' to pathname in filter_path() if it already ends with it. |
|
|
110 | |
|
|
111 | 28 Apr 2005; Mike Frysinger <vapier@gentoo.org> Makefile.am, configure.in: |
|
|
112 | With az's help, clean up autotools to work with cross-compiling. |
|
|
113 | |
|
|
114 | * sandbox-1.2.2 (2005/04/28) |
| 4 | |
115 | |
| 5 | 28 Apr 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
116 | 28 Apr 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
| 6 | Only check for /dev/{null,zero} for unlink hack, else ricers using /dev/shm |
117 | Only check for /dev/{null,zero} for unlink hack, else ricers using /dev/shm |
| 7 | have issues; bug #90592. |
118 | have issues; bug #90592. |
| 8 | |
119 | |
| 9 | * sandbox-1.2.1 |
120 | * sandbox-1.2.1 (2005/04/23) |
| 10 | |
121 | |
| 11 | 23 Apr 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, canonicalize.c, |
122 | 23 Apr 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, canonicalize.c, |
| 12 | getcwd.c, libsandbox.c, localdecls.h, sandbox.h, sandbox_futils.c: |
123 | getcwd.c, libsandbox.c, localdecls.h, sandbox.h, sandbox_futils.c: |
| 13 | Make sure all functions used in libsandbox.c is declared static. Define |
124 | Make sure all functions used in libsandbox.c is declared static. Define |
| 14 | SB_STATIC in localdecls.h for this. Include sandbox_futils.c rather than |
125 | SB_STATIC in localdecls.h for this. Include sandbox_futils.c rather than |
| 15 | linking with its object. Hopefully this will fix bug #90153. |
126 | linking with its object. Hopefully this will fix bug #90153. |
| 16 | |
127 | |
| 17 | * sandbox-1.2 |
128 | * sandbox-1.2 (2005/04/23) |
| 18 | |
129 | |
| 19 | 22 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
130 | 22 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
| 20 | Allow lchown a symlink in write-allowed path pointing to write-denied |
131 | Allow lchown a symlink in write-allowed path pointing to write-denied |
| 21 | target. |
132 | target. |
| 22 | |
133 | |
Parent Directory
| 
Revision Log
| 
Patch