 Cristian Toader
|
55d8b8e578
fixed bug where sandbox_getaddrinfo() would fail when -Sandbox is 0
|
vor 11 Jahren |
|
Cristian Toader
|
b4b0eddd29
switched to a more generic way of handling the sandbox configuration
|
vor 11 Jahren |
|
Cristian Toader
|
1ef0b2e1a3
changed how sb getaddrinfo works such that it supports storing multiple results
|
vor 11 Jahren |
|
Cristian Toader
|
f93ba9a2ef
documentation update for _array functions
|
vor 11 Jahren |
|
Cristian Toader
|
d5f43b5254
_array filter functions now rely on final NULL parameter
|
vor 11 Jahren |
|
Cristian Toader
|
ce04d2a622
replaced boolean char with int
|
vor 11 Jahren |
|
Cristian Toader
|
8e2b9d2844
small fixes in documentation and sandbox_getaddrinfo()
|
vor 11 Jahren |
|
Cristian Toader
|
6cae5d706c
Added doxygen struct doc and replaced func() with funct(void)
|
vor 11 Jahren |
|
Cristian Toader
|
8b8f87a06a
removed PARAM_LEN
|
vor 11 Jahren |
|
Cristian Toader
|
36aeca0ecf
fix for getaddrinfo open syscall
|
vor 11 Jahren |
|
Cristian Toader
|
372e0f91fd
added comments for sandbox.h
|
vor 11 Jahren |
|
Cristian Toader
|
8a85a48b9d
attempt to add stat64 filename filters; failed due to getaddrinfo..
|
vor 11 Jahren |
|
Cristian Toader
|
44a4464cf6
fixed memory leak, added array filter support
|
vor 11 Jahren |
|
Cristian Toader
|
a960e56c68
multi-configuration support using sandbox_t struct
|
vor 11 Jahren |
|
Cristian Toader
|
356b646976
added execve and multi-configuration support
|
vor 11 Jahren |
|
Cristian Toader
|
442f256f25
switched to a design using filters as function pointer arrays
|
vor 11 Jahren |
|
Cristian Toader
|
871e5b35a8
small filter changes; openat as separate function
|
vor 11 Jahren |
|
Cristian Toader
|
8022def6f0
added openat parameter filter
|
vor 11 Jahren |
|
Cristian Toader
|
6d5b0367f6
Changes as suggested by nickm
|
vor 11 Jahren |
|
Cristian Toader
|
626a2b23de
integrated context for dynamic filters
|
vor 11 Jahren |
|
Cristian Toader
|
3dfe1c0639
initia stages of runtime dynamic filters
|
vor 11 Jahren |
|
Cristian Toader
|
abe082e7d0
dynamic parameter filter bug fixes
|
vor 11 Jahren |
|
Cristian Toader
|
962d814e52
dynamic parameter filter (prototype, not tested)
|
vor 11 Jahren |
|
Cristian Toader
|
e1410f20d7
added support for multiple parameters
|
vor 11 Jahren |
|
Cristian Toader
|
c15d09293b
added experimental support for open syscall path param
|
vor 11 Jahren |
|
Cristian Toader
|
8b12170f23
added support for numeric parameters, tested with rt_sigaction
|
vor 11 Jahren |
|
Cristian Toader
|
7cf1dbfd51
changed paramfilter type to intptr_t
|
vor 11 Jahren |
|
Cristian Toader
|
e7e2efb717
Added getter for protected parameter
|
vor 11 Jahren |
|
Cristian Toader
|
673349c42e
Repair of some of the lost parameter filters history
|
vor 11 Jahren |
|
Cristian Toader
|
f9c1ba6493
Add a basic seccomp2 syscall filter on Linux
|
vor 11 Jahren |
