Log of /trunk/src/sandbox.c
Parent Directory
| 
Revision Log
Revision
268 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Wed Jul 5 13:50:48 2006 UTC
(6 years, 11 months ago)
by
azarah
File length: 17018 byte(s)
Diff to
previous 267
,
to
selected 78
Just killing the child with SANDBOX_ABORT do not actually abort the make process
in many cases. So also kill the offending child, and pray that make will also
abort. This is really hackish, and we should rather kill the whole process tree,
but currently its too much work (considering that we are in signal context which
probably will make things difficult - not even talking about the bsd's ...), so it
will have to do.
Revision
216 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Mon Dec 5 09:28:34 2005 UTC
(7 years, 6 months ago)
by
azarah
File length: 15456 byte(s)
Diff to
previous 204
,
to
selected 78
Rename sandbox_futils.c to sandbox_utils.c. Add gstrndup() and gbasename()
to sandbox_utils.c. Add check for glibc, and fixup things to not need glibc
only extensions if not needed for versioned symbols.
Revision
181 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Mon Nov 28 11:35:30 2005 UTC
(7 years, 6 months ago)
by
azarah
File length: 15678 byte(s)
Diff to
previous 178
,
to
selected 78
Revert 64bit arch test, as we should build the 32bit version without full
path checking as well, and add --enable-multilib switch to configure.
Revision
97 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Fri May 13 12:52:10 2005 UTC
(8 years, 1 month ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 18103 byte(s)
Diff to
previous 96
,
to
selected 78
Add get_sandbox_debug_log(), and use it (add behaviour similar to SANDBOX_LOG
if already exported when sandbox started). Fix get_sandbox_log() and new
get_sandbox_debug_log() to not use already exported environment variables if
they have '/' in them. Use snprintf()'s instead of strncpy()'s. More
SB_PATH_MAX fixes.
Revision
89 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Wed May 11 23:23:07 2005 UTC
(8 years, 1 month ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 17890 byte(s)
Diff to
previous 88
,
to
selected 78
Rewrite environment stuff to only be set when execve'ing the child process
to try and avoid issues like bug #91541 that causes sandbox to crash if
we set LD_PRELOAD sandbox side already.
Revision
78 -
(
view)
(
download)
(
as text)
(
annotate)
-
[selected]
Modified
Tue May 10 07:08:21 2005 UTC
(8 years, 1 month ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 21582 byte(s)
Diff to
previous 77
Do not use LD_PRELOAD if it contains libtsocks.so, as it breaks sandbox
for some odd reason, bug #91541.
Revision
71 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Wed May 4 14:46:50 2005 UTC
(8 years, 1 month ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 21385 byte(s)
Diff to
previous 70
,
to
selected 78
Do not reset already set LD_PRELOAD when starting sandbox. If LD_PRELOAD is
already set, init of the env vars fails for some reason, so do this later on,
and do not warn (bug #91431).
Revision
35 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Sun Mar 13 23:23:00 2005 UTC
(8 years, 3 months ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 20872 byte(s)
Diff to
previous 34
,
to
selected 78
Fixup the constructor/destructor function names again (they should be _init()
and _fini() it seems, and not being called caused sandbox_lib_path to be
unset, and thus breaking the execve() wrapper's LD_PRELOAD protection).
Add both the path in given SANDBOX_x variable, as well as its symlink
resolved path in init_env_entries(). Modify filter_path() to be able to
resolve paths without resolving symlinks, as well as to be able to resolve
symlinks. Fix a possible segfault in check_access(). Add symlink resolving
to check_access() resolving bug #31019. Add 'hack' for unlink, as the fix
for bug #31019 cause access violations if we try to remove a symlink that is
not in protected path, but points to a protected path. Fix a memory leak in
sandbox.c (sandbox_pids_file in main()). Fix the realpath() calls in main()
(sandbox.c) being unchecked. Fix the debug logname not having the pid in it
(pid_string was uninitialized). General syntax cleanups.
This form allows you to request diffs between any two revisions of this file.
For each of the two "sides" of the diff,
enter a numeric revision.
| Sticky Revision: |
|
