1 | # ChangeLog for Path Sandbox |
1 | # ChangeLog for Path Sandbox |
2 | # Copyright 1999-2004 Gentoo Foundation; Distributed under the GPL v2 |
2 | # Copyright 1999-2004 Gentoo Foundation; Distributed under the GPL v2 |
3 | # $Header$ |
3 | # $Header$ |
4 | |
4 | |
|
|
5 | * sandbox-1.2.1 |
|
|
6 | |
|
|
7 | 23 Apr 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, canonicalize.c, |
|
|
8 | getcwd.c, libsandbox.c, localdecls.h, sandbox.h, sandbox_futils.c: |
|
|
9 | Make sure all functions used in libsandbox.c is declared static. Define |
|
|
10 | SB_STATIC in localdecls.h for this. Include sandbox_futils.c rather than |
|
|
11 | linking with its object. Hopefully this will fix bug #90153. |
|
|
12 | |
|
|
13 | 22 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
|
|
14 | Allow lchown a symlink in write-allowed path pointing to write-denied |
|
|
15 | target. |
|
|
16 | |
|
|
17 | 21 Mar 2005; Marius Mauch <genone@gentoo.org> libsandbox.c: |
|
|
18 | Also show resolved symlink names in the log. |
|
|
19 | |
|
|
20 | 14 Mar 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, libsandbox.c: |
|
|
21 | Seems -nostdlib was the problem with the constructor/destructor - remove it |
|
|
22 | from Makefile.am, and change the constructor/destructor names again. |
|
|
23 | |
|
|
24 | 14 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
|
|
25 | Also rename the _init() and _fini() declarations. |
|
|
26 | |
|
|
27 | 14 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c, sandbox.c: |
|
|
28 | Fixup the constructor/destructor function names again (they should be _init() |
|
|
29 | and _fini() it seems, and not being called caused sandbox_lib_path to be |
|
|
30 | unset, and thus breaking the execve() wrapper's LD_PRELOAD protection). |
|
|
31 | Add both the path in given SANDBOX_x variable, as well as its symlink |
|
|
32 | resolved path in init_env_entries(). Modify filter_path() to be able to |
|
|
33 | resolve paths without resolving symlinks, as well as to be able to resolve |
|
|
34 | symlinks. Fix a possible segfault in check_access(). Add symlink resolving |
|
|
35 | to check_access() resolving bug #31019. Add 'hack' for unlink, as the fix |
|
|
36 | for bug #31019 cause access violations if we try to remove a symlink that is |
|
|
37 | not in protected path, but points to a protected path. Fix a memory leak in |
|
|
38 | sandbox.c (sandbox_pids_file in main()). Fix the realpath() calls in main() |
|
|
39 | (sandbox.c) being unchecked. Fix the debug logname not having the pid in it |
|
|
40 | (pid_string was uninitialized). General syntax cleanups. |
|
|
41 | |
|
|
42 | 09 Mar 2005; Brian Harring <ferringb@gentoo.org> sandbox.c: Fixed the |
|
|
43 | infamous "pids file is not a regular file" w/out newline bug. |
|
|
44 | |
|
|
45 | 09 Mar 2005; Brian Harring <ferringb@gentoo.org> Makefile.am, configure.in: |
|
|
46 | Correct libc_version path detection, since it was screwing up if libdir != |
|
|
47 | "/lib/". |
|
|
48 | |
|
|
49 | 02 Mar 2005; Martin Schlemmer <azarah@gentoo.org> libsandbox.c: |
|
|
50 | Hack to make sure sandboxed process cannot remove a device node, bug #79836. |
|
|
51 | |
|
|
52 | 02 Mar 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am: |
|
|
53 | Fix symbols.in not added to dist. |
|
|
54 | |
|
|
55 | 02 Mar 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, canonicalize.c, |
|
|
56 | getcwd.c, libsandbox.c, sandbox.c, sandbox.h, sandbox_futils.c: |
|
|
57 | White space fixes. |
|
|
58 | |
|
|
59 | 02 Mar 2005; Martin Schlemmer <azarah@gentoo.org> Makefile.am, canonicalize.c, |
|
|
60 | configure.in, getcwd.c, libsandbox.c, symbols.in: |
|
|
61 | Fix inverse test logic in canonicalize.c, use a strncpy. Fix gcc warning in |
|
|
62 | getcwd.c. Add symbols.in and logic to Makefile.am to generate symbol versions |
|
|
63 | for glibc and other libc's that use this. Update libsandbox.c to use these |
|
|
64 | symbol versions if available. Fix exec wrapper to re-export LD_PRELOAD if the |
|
|
65 | process unset it. |
|
|
66 | |
|
|
67 | 01 Mar 2005; Brian Harring <ferringb@gentoo.org> libsandbox.c: |
|
|
68 | killed off _init and _fini in favor of |
|
|
69 | void __attribute__ ((constructor)) init_func and |
|
|
70 | void __attribute__ ((destructor)) closing_func. _(init|func) were deprecated. |
|
|
71 | |
|
|
72 | 06 Dec 2004; Brian Harring <ferringb@gentoo.org> Makefile.am, libsandbox.c, |
|
|
73 | canonicalize.c, getcwd.c: Fixed compilation *again*. Hopefully cvs is done |
|
|
74 | having the hick-ups. |
|
|
75 | |
|
|
76 | 04 Dec 2004; Brian Harring <ferringb@gentoo.org> libsandbox.c, getcwd.c, |
|
|
77 | Makefile.am: Fixed compilation. |
|
|
78 | |
|
|
79 | 01 Dec 2004; Brian Harring <ferringb@gentoo.org> aclocal.m4: |
|
|
80 | Gutted the bugger so it stops checking for a c++ and fortran compiler. |
|
|
81 | Do *not* regenerate aclocal.m4 for making a release until a better |
|
|
82 | solution is created. |
|
|
83 | |
|
|
84 | 20 Nov 2004; Brian Harring <ferringb@gentoo.org> Makefile.am, sandbox_futils.c: |
|
|
85 | Removal of more hardcoded paths. |
|
|
86 | |
|
|
87 | 20 Nov 2004; Brian Harring <ferringb@gentoo.org> Makefile.am, configure.in, |
|
|
88 | sandbox_futils.c: tweaks to install sandbox.bashrc, and use it. |
|
|
89 | |
5 | 19 Nov 2004; Brian harring <ferringb@gentoo.org>: |
90 | 19 Nov 2004; Brian Harring <ferringb@gentoo.org>: |
6 | Sandbox is now autotooled, create-localdecls needs to be killed and the code |
91 | Sandbox is now autotooled, create-localdecls needs to be killed and the code |
7 | shifted into configure.in. Currently builds *one* libsandbox.so- if multiple |
92 | shifted into configure.in. Currently builds *one* libsandbox.so- if multiple |
8 | are desired (-m64 and -m32 for amd64), the ebuild should do it (imo). |
93 | are desired (-m64 and -m32 for amd64), the ebuild should do it (imo). |
9 | To get to a point of testing, automake && autoconf; created requisite files w/ |
94 | To get to a point of testing, automake && autoconf; created requisite files w/ |
10 | a(utomake|clocal)-1.8, and autoconf 2.59. Installs to /usr/, instead of |
95 | a(utomake|clocal)-1.8, and autoconf 2.59. Installs to /usr/, instead of |