Log of /trunk/src/sandbox.c
Parent Directory
| 
Revision Log
Revision
268 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Wed Jul 5 13:50:48 2006 UTC
(11 years, 9 months ago)
by
azarah
File length: 17018 byte(s)
Diff to
previous 267
,
to
selected 124
Just killing the child with SANDBOX_ABORT do not actually abort the make process
in many cases. So also kill the offending child, and pray that make will also
abort. This is really hackish, and we should rather kill the whole process tree,
but currently its too much work (considering that we are in signal context which
probably will make things difficult - not even talking about the bsd's ...), so it
will have to do.
Revision
216 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Mon Dec 5 09:28:34 2005 UTC
(12 years, 4 months ago)
by
azarah
File length: 15456 byte(s)
Diff to
previous 204
,
to
selected 124
Rename sandbox_futils.c to sandbox_utils.c. Add gstrndup() and gbasename()
to sandbox_utils.c. Add check for glibc, and fixup things to not need glibc
only extensions if not needed for versioned symbols.
Revision
124 -
(
view)
(
download)
(
as text)
(
annotate)
-
[selected]
Modified
Fri Jun 17 12:32:02 2005 UTC
(12 years, 10 months ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 19483 byte(s)
Diff to
previous 123
Move get_sandbox_*_envvar() to sandbox_setup_environ(), as its more appropriate there.
Revision
97 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Fri May 13 12:52:10 2005 UTC
(12 years, 11 months ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 18103 byte(s)
Diff to
previous 96
,
to
selected 124
Add get_sandbox_debug_log(), and use it (add behaviour similar to SANDBOX_LOG
if already exported when sandbox started). Fix get_sandbox_log() and new
get_sandbox_debug_log() to not use already exported environment variables if
they have '/' in them. Use snprintf()'s instead of strncpy()'s. More
SB_PATH_MAX fixes.
Revision
89 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Wed May 11 23:23:07 2005 UTC
(12 years, 11 months ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 17890 byte(s)
Diff to
previous 88
,
to
selected 124
Rewrite environment stuff to only be set when execve'ing the child process
to try and avoid issues like bug #91541 that causes sandbox to crash if
we set LD_PRELOAD sandbox side already.
Revision
71 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Wed May 4 14:46:50 2005 UTC
(12 years, 11 months ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 21385 byte(s)
Diff to
previous 70
,
to
selected 124
Do not reset already set LD_PRELOAD when starting sandbox. If LD_PRELOAD is
already set, init of the env vars fails for some reason, so do this later on,
and do not warn (bug #91431).
Revision
35 -
(
view)
(
download)
(
as text)
(
annotate)
-
[select for diffs]
Modified
Sun Mar 13 23:23:00 2005 UTC
(13 years, 1 month ago)
by
azarah
Original Path:
trunk/sandbox.c
File length: 20872 byte(s)
Diff to
previous 34
,
to
selected 124
Fixup the constructor/destructor function names again (they should be _init()
and _fini() it seems, and not being called caused sandbox_lib_path to be
unset, and thus breaking the execve() wrapper's LD_PRELOAD protection).
Add both the path in given SANDBOX_x variable, as well as its symlink
resolved path in init_env_entries(). Modify filter_path() to be able to
resolve paths without resolving symlinks, as well as to be able to resolve
symlinks. Fix a possible segfault in check_access(). Add symlink resolving
to check_access() resolving bug #31019. Add 'hack' for unlink, as the fix
for bug #31019 cause access violations if we try to remove a symlink that is
not in protected path, but points to a protected path. Fix a memory leak in
sandbox.c (sandbox_pids_file in main()). Fix the realpath() calls in main()
(sandbox.c) being unchecked. Fix the debug logname not having the pid in it
(pid_string was uninitialized). General syntax cleanups.
This form allows you to request diffs between any two revisions of this file.
For each of the two "sides" of the diff,
enter a numeric revision.
| Sticky Revision: |
|
