 Nick Mathewson
|
9c3f7a6d35
Remove spurious libevent include in sandbox.c
|
11 years ago |
|
Nick Mathewson
|
0b319de60f
Elevate server TLS cipher preferences over client
|
11 years ago |
|
Nick Mathewson
|
0175fcaf7c
Fix uninitialized-ram free in unit tests
|
11 years ago |
|
Nick Mathewson
|
ab83a27450
Merge more changes files (verbatim) into the changelog
|
11 years ago |
|
Nick Mathewson
|
4367cbd71b
Merge remote-tracking branch 'public/sandbox_fixes_rebased_2'
|
11 years ago |
|
Nick Mathewson
|
250b84b8a8
Attribute 13304 and 13306 to 0.2.4.4-alpha.
|
11 years ago |
|
Nick Mathewson
|
c856193199
Merge remote-tracking branch 'andrea/bug11304'
|
11 years ago |
|
Nick Mathewson
|
74ddd5f739
Merge remote-tracking branch 'andrea/bug11306'
|
11 years ago |
|
Nick Mathewson
|
10174b00e7
Merge remote-tracking branch 'public/bug11477'
|
11 years ago |
|
Nick Mathewson
|
973661394a
Merge branch '10267_plus_10896_rebased_twice'
|
11 years ago |
|
Nick Mathewson
|
f9719b0781
Changes file for 10896
|
11 years ago |
|
Nick Mathewson
|
89e520e2a7
Call pf-divert openbsd-specific, not no-linux
|
11 years ago |
|
Nick Mathewson
|
c00c45fee1
Fix OSX compilation.
|
11 years ago |
|
Nick Mathewson
|
db8259c230
Whitespace, doc fixes
|
11 years ago |
 dana koch
|
f680d0fdd2
Educate tor on OpenBSD's use of divert-to rules with the pf firewall.
|
11 years ago |
|
Nick Mathewson
|
08ef8c0958
tor_addr_from_sockaddr() is applicable in ipfw code, so use it.
|
11 years ago |
|
Nick Mathewson
|
3e4680f312
ipfw TransPort support on FreeBSD (10267)
|
11 years ago |
|
Nick Mathewson
|
506c890440
add a changes file for the sandbox fixes series
|
11 years ago |
|
Nick Mathewson
|
f41491816c
Log the name of the failing syscall on failure
|
11 years ago |
|
Nick Mathewson
|
2ae47d3c3a
Block certain option transitions while sandbox enabled
|
11 years ago |
|
Nick Mathewson
|
f70cf9982a
Sandbox: permit O_NONBLOCK and O_NOCTTY for files we refuse
|
11 years ago |
|
Nick Mathewson
|
c80a6bd9d5
Don't reload logs or rewrite pidfile while sandbox is active
|
11 years ago |
|
Nick Mathewson
|
6194970765
Don't allow change to ConnLimit while sandbox is active
|
11 years ago |
|
Nick Mathewson
|
18f7f49a8c
Allow reloading torrc and writing to router-stability
|
11 years ago |
|
Nick Mathewson
|
69eb278830
Use SCMP_CMP_MASKED_EQ to allow flags, not force them
|
11 years ago |
|
Nick Mathewson
|
ce776cf270
Add a couple of missing renames so the server sandbox works again
|
11 years ago |
|
Nick Mathewson
|
e6785ee16d
Get Libevent's PRNG functioning under the linux sandbox
|
11 years ago |
|
Nick Mathewson
|
156eefca45
Make sure everything using an interned string is preceded by a log
|
11 years ago |
|
Nick Mathewson
|
8dc6755f6d
Introduce arg-counting macros to wrap seccomp_rule_add()
|
11 years ago |
|
Nick Mathewson
|
12028c29e6
Fix sandbox protection for rename
|
11 years ago |
