Nick Mathewson
|
c5c4ea2db0
Merge remote-tracking branch 'public/bug15088_025' into maint-0.2.6
|
9 years ago |
Nick Mathewson
|
d5b2cbea10
Add wait4 to the seccomp2 sandbox allowable syscall list
|
9 years ago |
Nick Mathewson
|
21ac0cd2af
Let AF_UNIX connections through the sandbox
|
9 years ago |
Nick Mathewson
|
f5f6d13e4c
Fix crash on glibc __libc_message()
|
9 years ago |
Nick Mathewson
|
f54e54b0b4
Bump copyright dates to 2015, in case someday this matters.
|
10 years ago |
Nick Mathewson
|
6e689aed75
Fix a memory leak in tor-resolve
|
10 years ago |
Nick Mathewson
|
d151a069e9
tweak whitespace; log bad socket family if bug occurs
|
10 years ago |
Francisco Blas Izquierdo Riera (klondike)
|
cca6ed80bf
Add the transparent proxy getsockopt to the sandbox
|
10 years ago |
Nick Mathewson
|
fcdcb377a4
Add another year to our copyright dates.
|
10 years ago |
Nick Mathewson
|
2e607ff519
Merge remote-tracking branch 'origin/maint-0.2.5'
|
10 years ago |
Nick Mathewson
|
09951bea7f
Don't use the getaddrinfo sandbox cache from tor-resolve
|
10 years ago |
Nick Mathewson
|
00ffccd9a6
Another clang analyzer complaint wrt HT_GENERATE
|
10 years ago |
Nick Mathewson
|
72ba1739e2
Fix another memory leak case in sandbox.c:prot_strings()
|
10 years ago |
Nick Mathewson
|
15be51b41d
Remove the non-implemented versions of the sandbox _array() functions
|
10 years ago |
Nick Mathewson
|
991545acf1
Whitespace fixes
|
10 years ago |
Nick Mathewson
|
523587a5cf
fix memory leak on failure in sandbox.c:prot_strings()
|
10 years ago |
Nick Mathewson
|
35b2e11755
Store sandbox params as char *, since that's what they are.
|
10 years ago |
Nick Mathewson
|
7f3563058d
Fix a 32-big conversion warning in 11970 fix
|
10 years ago |
Nick Mathewson
|
6f20dd7bfc
Merge remote-tracking branch 'public/bug11970'
|
10 years ago |
Nick Mathewson
|
b883b8d1a5
Yield a real error in the bug case of sandbox_getaddrinfo()
|
10 years ago |
Nick Mathewson
|
307aa7eb43
Spell getrlimit correctly.
|
10 years ago |
Nick Mathewson
|
a6688f9cbb
sandbox: allow enough setsockopt to make ConstrainedSockets work
|
10 years ago |
Nick Mathewson
|
a056ffabbb
sandbox: permit listen(2)
|
10 years ago |
Nick Mathewson
|
f0945ac270
Log the errno value if seccomp_load() fails.
|
10 years ago |
Nick Mathewson
|
b0c1c70011
Make sandbox.c compile on arm
|
10 years ago |
Nick Mathewson
|
e425fc7804
sandbox: revamp sandbox_getaddrinfo cacheing
|
10 years ago |
Nick Mathewson
|
fef65fa643
sandbox: permit gettid, sched_getaffinity
|
10 years ago |
Nick Mathewson
|
465982012c
sandbox: Disallow options which would make us call exec()
|
10 years ago |
Nick Mathewson
|
9735ca6e30
resolve a typo: sanboxing->sandboxing.
|
10 years ago |
Nick Mathewson
|
b8fe8ee748
Improved message when running sandbox on Linux without libseccomp
|
10 years ago |