Log of /trunk/src/sandbox.c
Parent Directory
| 
Revision Log
Revision
299 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Sat Jul 8 21:01:51 2006 UTC
(6 years, 11 months ago)
by
azarah
File length: 18768 byte(s)
Diff to
previous 298
Convert all string list operations to use the str_list_*() macro's.
This allow a nice cleanup of the bash argv stuff, and also actually
add error handling to that part of the code. Some more cleanup of
the environ stuff.
Revision
298 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Sat Jul 8 19:53:06 2006 UTC
(6 years, 11 months ago)
by
azarah
File length: 19270 byte(s)
Diff to
previous 297
Set 'env_ptr = environ;' _after_ we unset and set variables, else the
block could have been reallocated, and leave us using the wrong pointer.
General cleanup of the env handling code. Free all memory used.
Revision
286 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Thu Jul 6 16:37:20 2006 UTC
(6 years, 11 months ago)
by
azarah
File length: 19460 byte(s)
Diff to
previous 283
Set default values via a config file. Also support sandbox.d
config directory for package specific configuration files.
Revision
283 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Thu Jul 6 08:49:13 2006 UTC
(6 years, 11 months ago)
by
azarah
File length: 17153 byte(s)
Diff to
previous 282
Remove last libsandbox-only functions in favour for ones provided
by librcutil. Setup log_domain properly for debugging.
Revision
268 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Wed Jul 5 13:50:48 2006 UTC
(6 years, 11 months ago)
by
azarah
File length: 17018 byte(s)
Diff to
previous 267
Just killing the child with SANDBOX_ABORT do not actually abort the make process
in many cases. So also kill the offending child, and pray that make will also
abort. This is really hackish, and we should rather kill the whole process tree,
but currently its too much work (considering that we are in signal context which
probably will make things difficult - not even talking about the bsd's ...), so it
will have to do.
Revision
261 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Tue Jul 4 14:32:38 2006 UTC
(6 years, 11 months ago)
by
azarah
File length: 15816 byte(s)
Diff to
previous 224
Theoretically add support to terminate immediately if we had an access violation,
bug #138499. Uses environment variable SANDBOX_ABORT.
Revision
216 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Mon Dec 5 09:28:34 2005 UTC
(7 years, 6 months ago)
by
azarah
File length: 15456 byte(s)
Diff to
previous 204
Rename sandbox_futils.c to sandbox_utils.c. Add gstrndup() and gbasename()
to sandbox_utils.c. Add check for glibc, and fixup things to not need glibc
only extensions if not needed for versioned symbols.
Revision
181 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Mon Nov 28 11:35:30 2005 UTC
(7 years, 6 months ago)
by
azarah
File length: 15678 byte(s)
Diff to
previous 178
Revert 64bit arch test, as we should build the 32bit version without full
path checking as well, and add --enable-multilib switch to configure.
Revision
157 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Fri Aug 5 13:55:08 2005 UTC
(7 years, 10 months ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 15401 byte(s)
Diff to
previous 155
If we are called from the command line, do not care about PORTAGE_TMPDIR,
and make the current directory the work directory. Also rename the variable
portage_tmp_dir to work_dir.
Revision
97 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Fri May 13 12:52:10 2005 UTC
(8 years, 1 month ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 18103 byte(s)
Diff to
previous 96
Add get_sandbox_debug_log(), and use it (add behaviour similar to SANDBOX_LOG
if already exported when sandbox started). Fix get_sandbox_log() and new
get_sandbox_debug_log() to not use already exported environment variables if
they have '/' in them. Use snprintf()'s instead of strncpy()'s. More
SB_PATH_MAX fixes.
Revision
89 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Wed May 11 23:23:07 2005 UTC
(8 years, 1 month ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 17890 byte(s)
Diff to
previous 88
Rewrite environment stuff to only be set when execve'ing the child process
to try and avoid issues like bug #91541 that causes sandbox to crash if
we set LD_PRELOAD sandbox side already.
Revision
71 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Wed May 4 14:46:50 2005 UTC
(8 years, 1 month ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 21385 byte(s)
Diff to
previous 70
Do not reset already set LD_PRELOAD when starting sandbox. If LD_PRELOAD is
already set, init of the env vars fails for some reason, so do this later on,
and do not warn (bug #91431).
Revision
35 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Sun Mar 13 23:23:00 2005 UTC
(8 years, 3 months ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 20872 byte(s)
Diff to
previous 34
Fixup the constructor/destructor function names again (they should be _init()
and _fini() it seems, and not being called caused sandbox_lib_path to be
unset, and thus breaking the execve() wrapper's LD_PRELOAD protection).
Add both the path in given SANDBOX_x variable, as well as its symlink
resolved path in init_env_entries(). Modify filter_path() to be able to
resolve paths without resolving symlinks, as well as to be able to resolve
symlinks. Fix a possible segfault in check_access(). Add symlink resolving
to check_access() resolving bug #31019. Add 'hack' for unlink, as the fix
for bug #31019 cause access violations if we try to remove a symlink that is
not in protected path, but points to a protected path. Fix a memory leak in
sandbox.c (sandbox_pids_file in main()). Fix the realpath() calls in main()
(sandbox.c) being unchecked. Fix the debug logname not having the pid in it
(pid_string was uninitialized). General syntax cleanups.
This form allows you to request diffs between any two revisions of this file.
For each of the two "sides" of the diff,
enter a numeric revision.
| Sticky Revision: |
|
