 Nick Mathewson
|
2ae47d3c3a
Block certain option transitions while sandbox enabled
|
vor 12 Jahren |
|
Nick Mathewson
|
f70cf9982a
Sandbox: permit O_NONBLOCK and O_NOCTTY for files we refuse
|
vor 12 Jahren |
|
Nick Mathewson
|
c80a6bd9d5
Don't reload logs or rewrite pidfile while sandbox is active
|
vor 12 Jahren |
|
Nick Mathewson
|
6194970765
Don't allow change to ConnLimit while sandbox is active
|
vor 12 Jahren |
|
Nick Mathewson
|
18f7f49a8c
Allow reloading torrc and writing to router-stability
|
vor 12 Jahren |
|
Nick Mathewson
|
69eb278830
Use SCMP_CMP_MASKED_EQ to allow flags, not force them
|
vor 12 Jahren |
|
Nick Mathewson
|
ce776cf270
Add a couple of missing renames so the server sandbox works again
|
vor 12 Jahren |
|
Nick Mathewson
|
e6785ee16d
Get Libevent's PRNG functioning under the linux sandbox
|
vor 12 Jahren |
|
Nick Mathewson
|
156eefca45
Make sure everything using an interned string is preceded by a log
|
vor 12 Jahren |
|
Nick Mathewson
|
8dc6755f6d
Introduce arg-counting macros to wrap seccomp_rule_add()
|
vor 12 Jahren |
|
Nick Mathewson
|
12028c29e6
Fix sandbox protection for rename
|
vor 12 Jahren |
|
Nick Mathewson
|
739a52592b
Upgrade warning about missing interned string for sandbox
|
vor 12 Jahren |
|
Nick Mathewson
|
5aaac938a9
Have sandbox string protection include multi-valued parmeters.
|
vor 12 Jahren |
|
Nick Mathewson
|
f268101a61
Clean up sandbox structures a bit
|
vor 12 Jahren |
|
Nick Mathewson
|
6807b76a5e
Add missing rename function for non-linux platforms
|
vor 12 Jahren |
|
Nick Mathewson
|
71eaebd971
Drop 'fr' parameter from sandbox code.
|
vor 12 Jahren |
|
Nick Mathewson
|
e051e192a8
Remove nonsensical exec permission from sandbox code.
|
vor 12 Jahren |
|
Nick Mathewson
|
cbfb8e703e
Add 'rename' to the sandboxed syscalls
|
vor 12 Jahren |
|
Nick Mathewson
|
3802e32c7d
Only intern one copy of each magic string for the sandbox
|
vor 12 Jahren |
|
Nick Mathewson
|
ae9d6d73f5
Fix some initial sandbox issues.
|
vor 12 Jahren |
|
Nick Mathewson
|
211b8cc318
Only expose clean_backtrace() if we'll implement it
|
vor 12 Jahren |
|
Nick Mathewson
|
438a03ef7c
Merge remote-tracking branch 'origin/maint-0.2.4'
|
vor 12 Jahren |
|
Nick Mathewson
|
3fc0f9efb8
Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4
|
vor 12 Jahren |
|
Nick Mathewson
|
ef3d7f2f97
remove note about dannenberg; it has upgraded.
|
vor 12 Jahren |
|
Nick Mathewson
|
f050cf75b0
Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4
|
vor 12 Jahren |
|
Nick Mathewson
|
2ce0750d21
Update the authority signing key blacklist
|
vor 12 Jahren |
|
Nick Mathewson
|
125c8e5468
Merge remote-tracking branch 'public/bug11465'
|
vor 12 Jahren |
|
Nick Mathewson
|
03e0c7e366
Answer a question in a comment; fix a wide line.
|
vor 12 Jahren |
|
Nick Mathewson
|
1126ce1d86
Fix compiler warning on test_status.c
|
vor 12 Jahren |
|
Nick Mathewson
|
1e9053974b
add changes file for 11507
|
vor 12 Jahren |
