| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | sandbox: fix setup_cfg_var•••Bug: https://bugs.gentoo.org/970933
Signed-off-by: Mike Gilbert <floppym@gentoo.org>
|   Mike Gilbert | 2026-04-10 | 1 | -1/+1 |
| * | libsbutil: remove sb_close•••The close(2) manpage advises us to NOT retry after it fails.
Signed-off-by: Mike Gilbert <floppym@gentoo.org>
| Mike Gilbert | 2025-03-09 | 1 | -1/+1 |
| * | Replace SB_PATH_MAX with PATH_MAX•••Most of the kernel interfaces we use are capped to PATH_MAX anyway.
Signed-off-by: Mike Gilbert <floppym@gentoo.org>
| Mike Gilbert | 2025-03-08 | 3 | -9/+9 |
| * | Improve SANDBOX_TESTING overrides•••Signed-off-by: Mike Gilbert <floppym@gentoo.org>
| Mike Gilbert | 2025-02-14 | 1 | -3/+4 |
| * | libsbutil: avoid unnecessary use of libtool•••Signed-off-by: Mike Gilbert <floppym@gentoo.org>
| Mike Gilbert | 2025-01-19 | 1 | -1/+1 |
| * | sandbox: drop the '--run-configure' option•••This requires some nasty code in configure.ac, and prevents us from
using a different build system.
Signed-off-by: Mike Gilbert <floppym@gentoo.org>
| Mike Gilbert | 2025-01-17 | 1 | -19/+0 |
| * | Rework LFS handing•••Define _FILE_OFFSET_BITS=64 and _TIME_BITS=64 for code that does not
directly affect the wrapper functions.
Replace _LARGEFILE64_SOURCE functions with the standard variants.
Undefine _FILE_OFFSET_BITS and _TIME_BITS in wrappers.c to expose the
legacy declarations.
Also build the tests without _FILE_OFFSET_BITS set so we can actually
test the legacy functions.
The rc_get_size function now returns int64_t instead of off64_t. There
should be no effective change in behavior.
A new helper sb_fstat is added to avoid calling fstat64 from the wrapper
code.
Bug: https://bugs.gentoo.org/908801
Signed-off-by: Mike Gilbert <floppym@gentoo.org>
| Mike Gilbert | 2025-01-05 | 2 | -2/+3 |
| * | sandbox: do not compare array to NULL•••Fixes a compiler warning:
```
src/environ.c:211:19: warning: the comparison will always evaluate as ‘true’ for the address of ‘work_dir’ will never be NULL [-Waddress]
```
Bug: https://bugs.gentoo.org/906234
Signed-off-by: gto2023 <gto7052@mailbox.org>
Signed-off-by: Mike Gilbert <floppym@gentoo.org>
(cherry picked from commit 7f230519475c2aaea91df75b0165d8b6c03b9fa9)
|   gto2023 | 2023-08-05 | 1 | -1/+1 |
| * | sandbox: prevent possible use of uninitialized members of sandbox_info struct•••Signed-off-by: gto2023 <gto7052@mailbox.org>
Signed-off-by: Mike Gilbert <floppym@gentoo.org>
(cherry picked from commit 5d13985d6ec4ceeced9b9b45f00bc19c69efbb8f)
| gto2023 | 2023-08-05 | 1 | -1/+1 |
| * | Rename multiple personalities feature•••"schizo" isn't a particularly sensitive term, and it's not very clear what it
means to non-native English speakers anyway. Name it after what the feature
really does: multiple (Linux) personality support using ptrace.
Signed-off-by: Sam James <sam@gentoo.org>
(cherry picked from commit f342efa52fb54c55f009b694af1899e431300629)
|   Sam James | 2023-08-05 | 1 | -3/+3 |
| * | libsbutil: add sbio_faccessat and use it in sb_exists•••sbio_faccessat allows libsbutil to access the unwrapped version of
faccessat when called from libsandbox.
Using faccessat in place of fstatat seems to give a small boost in
performance.
Pass AT_EACCESS faccessat to enable a faster path if uid != euid.
Bug: https://bugs.gentoo.org/910273
Signed-off-by: Mike Gilbert <floppym@gentoo.org>
(cherry picked from commit 0317bbe09fe23e4bd972ee254f14817def701731)
| Mike Gilbert | 2023-08-03 | 1 | -0/+1 |
| * | change FS calls to use 64-bit interfaces explicitly•••Make sure we use 64-bit FS interfaces when accessing the FS. This
is needed not only to stat or open large files, but even files with
64-bit inodes.
Bug: https://bugs.gentoo.org/583282
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
(cherry picked from commit 632cc66ba52eb6aa7fd3e457c64d9186389a20b4)
Signed-off-by: Mike Gilbert <floppym@gentoo.org>
|   Mike Frysinger | 2022-12-30 | 1 | -2/+2 |
| * | sandbox: add backwards compat interface hack•••Portage runs commands through sandbox like:
$ sandbox "/usr/lib/portage/python3.9/ebuild.sh unpack"
That means we can't break the CLI without breaking portage and forcing
everyone to upgrade together. That'll be pretty disruptive for people,
so add a hack to detect this situation: if a single argument is passed
on the CLI, and it doesn't appear to be a file, then fallback to running
it through the shell. This keeps portage working while allowing the new
interface style to launch. If/when we can update portage to always use
the -c option, maybe we can drop this in the future. Or not ... it's
not exactly the worst hack for users.
Bug: https://bugs.gentoo.org/265907
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
v2.29 | Mike Frysinger | 2021-11-02 | 1 | -0/+9 |
| * | sandbox: delete now unused variable•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2021-11-01 | 1 | -1/+0 |
| * | sandbox: include "sandbox" in the error log summary•••This should make it a little more clear that this summary is coming
from the sandbox and not somewhere else.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2021-11-01 | 1 | -1/+1 |
| * | sandbox: change interface to make it easier to pass thru•••The sandbox command line is passed to a shell for execution. This can
be a bit awkward to quote right if you weren't expecting it, and even
if you were. Change the default behavior to be more like `env` where
the arguments, as they are, get passed through and run. If people want
the old shell behavior, they can use the -c option akin to `bash -c`.
Bug: https://bugs.gentoo.org/265907
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2021-10-28 | 3 | -19/+34 |
| * | sandbox: avoid repetitive strlen calculations when building cmdline•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2021-10-28 | 1 | -11/+9 |
| * | sandbox: undefine dprintf•••The C library has a dprintf function too, and it might be a define
that clashes with ours, so undefine it to avoid warnings.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2021-10-28 | 1 | -0/+3 |
| * | sandbox: leverage PR_SET_NO_NEW_PRIVS when available•••This will lock down the ability to use set*id programs (like sudo),
and will allow us to utilize seccomp bpf to speed up ptrace.
Closes: https://bugs.gentoo.org/442172
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
v2.27 | Mike Frysinger | 2021-10-23 | 1 | -0/+16 |
| * | sandbox: add a --run-configure option•••When setting up sandbox on a new system for development, it helps to
be able to build the new sandbox checkout in the same way as it is
currently installed in the system. Add a command line option for
this explicitly to speed up development.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2021-10-23 | 2 | -10/+20 |
| * | build: hoist -Itop_srcdir to common AM_CPPFLAGS•••Every subdir sets this var this way, so might as well unify it.
We keep very few files in here, so shouldn't be a future problem.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2021-10-23 | 1 | -1/+0 |
| * | Revert "Remove leftover generated Makefiles from the repo (sic!)"•••This reverts commit 53ffbaeb24f6ee22a2dcd70fad29c86a4dd863c2.
These files are supposed to be in here.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2021-10-22 | 1 | -0/+4 |
| * | Remove leftover generated Makefiles from the repo (sic!)•••Signed-off-by: Michał Górny <mgorny@gentoo.org>
|   Michał Górny | 2021-10-22 | 1 | -4/+0 |
| * | switch to https:// URIs when possible•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2021-10-21 | 2 | -3/+3 |
| * | build: flatten build a bit to avoid (most) recursive make•••Provides a bit of a speed up.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2021-10-21 | 3 | -17/+19 |
| * | namespaces: add support for cgroup & time•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2021-10-21 | 3 | -8/+30 |
| * | libsandbox: add SANDBOX_METHOD setting•••This allows people to disable use of ptrace if their configuration
does not support it. This forces older sandbox behavior where we
cannot protect against static or set*id programs.
Bug: https://bugs.gentoo.org/648516
Bug: https://bugs.gentoo.org/771360
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2021-10-18 | 1 | -0/+3 |
| * | sandbox: allow user to force SIGKILL•••Sometimes the child process can get wedged and not respond to CTRL+C,
so add an escape hatch so the user can easily force SIGKILL.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2016-03-29 | 1 | -2/+10 |
| * | sandbox: enable support for linux namespaces•••This initial version doesn't enable their use by default.
URL: https://bugs.gentoo.org/512794
Reported-by: Matthew Thode <prometheanfire@gentoo.org>
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
v2.9 | Mike Frysinger | 2015-09-27 | 5 | -1/+306 |
| * | libsbutil: add helpers for reading config options (w/out env export)•••All sandbox settings thus far have been for libsandbox.so to process.
With newer features though, we have settings that might only apply to
the main sandbox program. Add some helper functions for parsing out
those settings (which a later commit will utilize).
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2015-09-26 | 2 | -0/+8 |
| * | sandbox: add proper option parsing•••This lays the groundwork for adding more runtime options.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2015-09-20 | 4 | -40/+125 |
| * | sandbox: pass child signals back up to the parent•••We were incorrectly passing signal information back up to the parent.
See the URL for more information.
URL: http://www.cons.org/cracauer/sigint.html
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2013-02-22 | 1 | -24/+48 |
| * | sandbox: do not resolve target of stderr•••The recent e12fee192ac8b0343a468e5a8f7811a7b029ff9a commit does not
handle things when stderr is connected to a real file (e.g. a pipe
or a socket or fifo or ...). It also does not play well to have
multiple things writing to the same file through different fds.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2013-02-24 | 1 | -4/+7 |
| * | add a new message env var•••This is used whenever sandbox wants to display an informational message.
For example, early notification of a path violation, or debugging output.
We can't just pop open an fd and pass that around as apps consider that
leakage and will often break assumptions in terms of free fds. Or apps
that start up and cleanse all of their open fds.
So instead, we just pass around an env var that holds the full path to
the file we want will write to. Since these messages are infrequent
(compared to overall runtime), opening/writing/closing the path every
time is fine.
This also avoids all the problems associated with using external portage
helpers for writing messages.
A follow up commit will take care of the situation where apps (such as
scons) attempt to also cleanse the env before forking.
URL: http://bugs.gentoo.org/278761
URL: http://bugs.gentoo.org/431638
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2013-02-24 | 3 | -2/+17 |
| * | delete unused sandbox env vars•••Nothing uses or cares about these vars, so punt them.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2013-02-24 | 3 | -9/+3 |
| * | environ: add a new is_env_var helper for checking var names•••This is laying the ground work for processing more vars in the
future than just LD_PRELOAD.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2013-02-24 | 1 | -2/+2 |
| * | sandbox: allow log files to fallback to tmpdir•••Since non-root users typically do not have write access to /var/log,
allow it to fallback to standard tmpdirs. This makes testing locally
a lot easier.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2012-12-24 | 1 | -2/+2 |
| * | significantly overhaul output helpers•••There are a few major points we want to hit here:
- have all output from libsandbox go through portage helpers when we are
in the portage environment so that output is properly logged
- convert SB_E{info,warn,error} to sb_e{info,warn,error} to match style
of other functions and cut down on confusion
- move all abort/output helpers to libsbutil so it can be used in all
source trees and not just by libsandbox
- migrate all abort points to the centralized sb_ebort helper
Unfortunately, it's not terribly easy to untangle these into separate
patches, but hopefully this shouldn't be too messy as much of it is
mechanical: move funcs between files, and change the name of funcs
that get called.
URL: http://bugs.gentoo.org/278761
Reported-by: Mounir Lamouri <volkmar@gentoo.org>
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2012-06-23 | 2 | -16/+7 |
| * | tests: always bubble up exit code regardless of log existence•••To simplify testing, do not mung exit(0) to exit(1) just because the log
file exists. In many of our tests, we will be doing things to generate
a log file, but we explicitly test for exit values ourselves.
This is also needed to make log file handling more resilient where we
get the name at startup, but don't allow live env changes after that.
The changing of the log name to sb.log on the fly no longer works.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2012-06-23 | 1 | -2/+3 |
| * | sandbox: drop beep support•••Almost no one has beep support turned on anymore, and ebeep in the main
tree has been deprecated (meaning it wasn't found useful while building
packages). So punt support for it from sandbox too.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2012-06-23 | 2 | -15/+1 |
| * | libsandbox: push down constructor init•••Since every consumer of sb_open gets a copy of the sbio_open data, push
the init of this into the .data section of the respective consumers to
avoid the runtime overhead.
This just leaves sandbox_lib setup in the constructor function, but that
is only needed by the execve wrapper, so push down init of that to the
existing sb_init logic which happens before our execve wrapper gets used.
URL: http://bugs.gentoo.org/404013
Reported-by: Mike Gilbert <floppym@gentoo.org>
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2012-03-05 | 1 | -0/+1 |
| * | sandbox: dont warn about inherited ignored signals•••Inheriting signals are normal/fine, so don't warn about those since they
aren't a problem.
URL: http://bugs.gentoo.org/285341
Reported-by: Paul Varner <fuzzyray@gentoo.org>
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-10-28 | 1 | -4/+4 |
| * | libsbutil: kill off unnecessary log_domain code•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-08-25 | 1 | -3/+0 |
| * | drop force pic flags•••The autotool build system already adds PIC where needed, so don't force
our own -D/-f options.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-08-25 | 1 | -2/+1 |
| * | add -Wall to automake runs and fix fallout•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-08-25 | 1 | -5/+3 |
| * | setup local sandbox.d for running tests to avoid /etc/sandbox.d•••Always use local sandbox.d copy to avoid random /etc/sandbox.d issues like
it doesn't exist, or has permission problems, or anything else.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-04-26 | 1 | -1/+2 |
| * | libsandbox: enable tracing for multiple personalities•••Initial support for tracing non-default personalities. For example,
tracing a 32bit binary from a 64bit environment.
URL: http://bugs.gentoo.org/264399
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Reported-by: Patrick Lauer <patrick@gentoo.org>
| Mike Frysinger | 2009-04-05 | 1 | -0/+4 |
| * | sandbox: stop denying /etc/ld.so.preload•••The very old method of loading sandbox was via ld.so.preload, so it was
added to default deny list. However, that's long dead, and since it does
not conflict with LD_PRELOAD, no point in preventing access.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-03-31 | 1 | -2/+0 |
| * | sandbox: don't put duplicate sandbox.so into LD_PRELOAD•••If launching another sandbox instance, don't blindly append LD_PRELOAD
with the sandbox lib.
URL: http://bugs.gentoo.org/216942
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Reported-by: Brian Harring <ferringb@gmail.com>
v1.6 | Mike Frysinger | 2009-03-12 | 1 | -11/+15 |
| * | sandbox: pass shell exit status up•••If the command sandbox was instructed to execute failed, make sure we pass
that exact exit status back up instead of normalizing everything to 0/1.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-03-12 | 1 | -13/+11 |
| * | sandbox: delete the testing var after install•••We don't want people to bypass normal mechanisms with the testing var, so
zero out the name when installing the sandbox binary.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
v1.4 | Mike Frysinger | 2009-03-08 | 2 | -1/+9 |
| * | sandbox: do not dist sandbox.sh and clean up error messages•••The sandbox.sh file is generated now, so do not mark it as a dist target.
To make this kind of error easier to figure out in the future, have all
sandbox errors related to files include the full filename that is causing
an error.
URL: http://bugs.gentoo.org/258690
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Reported-by: Alexis Ballier <aballier@gentoo.org>
| Mike Frysinger | 2009-02-12 | 2 | -6/+6 |
| * | sandbox: check signal returns and allow SIGHUP to be ignored•••If the SIGHUP signal is already set to SIG_IGN, then do not replace it
with our own handler as most likely this means the user is using `nohup`.
As for the other signals, check the return value and warn if something
weird happens (like they aren't all set to SIG_DFL).
URL: http://bugs.gentoo.org/217898
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Reported-by: Ken Bloom <kbloom@gmail.com>
| Mike Frysinger | 2009-02-12 | 1 | -5/+16 |
| * | tests: get scripts working in sandbox.sh•••Make sure we source the local sandbox.{bashrc,conf} and we always make the
helper functions available when testing even if we aren't interactive. Now
we can run `make check` and test the local version of sandbox even when we
are running under another sandbox env.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-02-08 | 3 | -5/+17 |
| * | sandbox: fix typo in struct sandbox_info_t decl•••A "typedef" was missing when declaring the sandbox_info_t struct resulting
in a large unused "sandbox_info_t" object showing up everywhere. Normally
this isn't a problem (other than resource waste), but some systems don't
like multiply defined objects even if they're in the .bss section.
URL: http://bugs.gentoo.org/258031
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Reported-by: Timo Kamph <timo@kamph.org>
| Mike Frysinger | 2009-02-07 | 1 | -1/+1 |
| * | sandbox: new sb_{p,}err() helper functions•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-02-02 | 2 | -16/+12 |
| * | sandbox: fixup a few more NULL memory checks•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-02-02 | 1 | -5/+4 |
| * | sandbox/libsbutil: remove more useless error checks and var inits•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-02-01 | 2 | -21/+7 |
| * | sandbox: convert remaining perror to sb_pwarn•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-02-01 | 3 | -4/+4 |
| * | sandbox: unify/standardize message output functions•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-02-01 | 1 | -54/+41 |
| * | sandbox: remove unused /var/tmp dir handling•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-02-01 | 2 | -8/+0 |
| * | sandbox: declare all local funcs static•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-02-01 | 1 | -5/+5 |
| * | sandbox: simplify print_sandbox_log() function•••Avoid memory management issues and read/write the log file directly to
stderr.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2009-02-01 | 1 | -37/+23 |
| * | sandbox: use $(LIBDL) rather than -ldl•••URL: http://bugs.gentoo.org/256741
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Reported-by: Javier Villavicencio <the_paya@gentoo.org>
| Mike Frysinger | 2009-01-28 | 1 | -1/+1 |
| * | libsbutil: find libsandbox.so in non-standard paths•••If installing sandbox into a non-standard location (and the library ends up
in a non-standard path where the ELF loader does not search), then set the
LD_PRELOAD variable to the full path.
URL: http://bugs.gentoo.org/254358
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
Reported-by: Jeremy Olexa <darkside@gentoo.org>
| Mike Frysinger | 2009-01-26 | 1 | -3/+1 |
| * | libsbutil: cleanup x* memory functions•••Pull the x* memory functions out of rcscripts and into libsbutil and change
their style to match the rest of sbutil. Also add xzalloc() and xstrdup(),
and convert pointless strndup() usage to strdup().
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-12-31 | 2 | -12/+3 |
| * | sandbox: include full libc path in version output•••Include the full libc path (LIBC_PATH) in the sandbox --version output as
this is very useful debug information.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-11-29 | 1 | -1/+1 |
| * | src/sandbox.sh: produce it from configure•••Rather than mucking with paths dynamically, just get the absolute top
builddir from configure.
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-11-28 | 1 | -1/+1 |
| * | tests: fixup running test out of src tree•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-11-16 | 1 | -1/+1 |
| * | tests: move libsigsegv disable to configure.ac•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-11-16 | 1 | -1/+5 |
| * | sandbox: make -h/--help/-V/--version print out something useful•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-11-16 | 1 | -0/+36 |
| * | sandbox: add a script to quickly test locally built libsandbox•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-11-16 | 2 | -0/+7 |
| * | sandbox: display when a process exits due to a signal•••URL: http://bugs.gentoo.org/194943
Signed-off-by: Ed Catmur <ed@catmur.co.uk>
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
|   Ed Catmur | 2008-11-16 | 1 | -5/+11 |
| * | unify SB_E{INFO,WARN,ERROR} functions and have them call the internal sb_prin...•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-11-16 | 1 | -6/+4 |
| * | move build flags to configure rather than Makefile•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-11-11 | 1 | -4/+4 |
| * | sandbox: convert to stdbool•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-11-10 | 2 | -6/+6 |
| * | sandbox: remove remaining multilib code•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-11-09 | 1 | -6/+0 |
| * | sandbox: unify banner message and drop "linux" from it•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-11-09 | 1 | -2/+3 |
| * | headers.h: consolidate all random system includes into one file•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-11-09 | 2 | -18/+2 |
| * | cleanup whitespace and comments -- no functional changes•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-11-09 | 3 | -66/+16 |
| * | sandbox: drop pointless cast•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2008-11-09 | 1 | -1/+1 |
| * | sandbox: properly use the return value of xrealloc•••URL: http://bugs.gentoo.org/238231
Signed-off-by: David Leverton <levertond@googlemail.com>
Signed-off-by: Mike Frysinger <vapier@gentoo.org>
|   David Leverton | 2008-11-08 | 1 | -0/+1 |
| * | src/sandbox.h: add missing header•••Signed-off-by: Mike Frysinger <vapier@gentoo.org>
| Mike Frysinger | 2006-09-03 | 1 | -0/+45 |
| * | Punt vim indentation line.•••Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
|   Martin Schlemmer | 2006-07-13 | 1 | -1/+0 |
| * | Punt old copyright stuff, as nearly everything was rewrited. If something is...•••Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Martin Schlemmer | 2006-07-13 | 1 | -15/+26 |
| * | Split out environment related functions, and make their naming a bit more sane.•••Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Martin Schlemmer | 2006-07-13 | 3 | -353/+395 |
| * | Update for librcutil dynbuf function name changes.•••Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Martin Schlemmer | 2006-07-12 | 1 | -16/+16 |
| * | Check log size before we open it.•••Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Martin Schlemmer | 2006-07-11 | 1 | -3/+4 |
| * | Use IO related sb_*() functions, and improve error checking.•••Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Martin Schlemmer | 2006-07-11 | 1 | -5/+13 |
| * | Remove file_length(), and rather use rc_get_size().•••Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Martin Schlemmer | 2006-07-09 | 1 | -2/+2 |
| * | Move libsandbox to its own directory.•••Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Martin Schlemmer | 2006-07-09 | 4 | -2095/+0 |
| * | As we are using a symbol map for libsandbox, its no longer needed•••to have all the internal functions static, and thus we can break
things out a bit and make the source layout more sane. Start by
moving librcutil to libsbutil, and adding all the defines and
helper functions needed by both libsandbox and sandbox.
Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Martin Schlemmer | 2006-07-09 | 6 | -279/+15 |
| * | Reformat previous added code a bit, and add debug messages•••and even more error checking. Abort on some more unrecoverable
errors.
Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Martin Schlemmer | 2006-07-09 | 1 | -80/+128 |
| * | Apply patch to make reading and writing more reliable•••Signed-off-by: Alex Unleashed <unledev@gmail.com>
Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
|   Alex Unleashed | 2006-07-09 | 1 | -65/+137 |
| * | Fix access call strncmp's•••Signed-off-by: Alex Unleashed <unledev@gmail.com>
Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Alex Unleashed | 2006-07-09 | 1 | -3/+3 |
| * | Update comment.•••Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Martin Schlemmer | 2006-07-09 | 1 | -1/+1 |
| * | Free child argv we allocated earlier, as at execve() duplicates•••this, so no need to keep it around and waiste more memory. Make
sure we will not in future free them twice.
Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Martin Schlemmer | 2006-07-08 | 1 | -2/+6 |
| * | Free child environ we allocated earlier, as at execve() duplicates•••this, so no need to keep it around and waiste more memory.
Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Martin Schlemmer | 2006-07-08 | 1 | -4/+9 |
| * | Rather link libsandbox against librcutil's libtool objects (.lo),•••as it should be more portable, but do add the extra fat.
Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Martin Schlemmer | 2006-07-08 | 1 | -5/+8 |
| * | Add needed changes to get a working sandbox on FreeBSD•••Signed-off-by: Alex Unleashed <unledev@gmail.com>
Signed-off-by: Martin Schlemmer <azarah@gentoo.org>
| Alex Unleashed | 2006-07-08 | 1 | -2/+2 |
Mike Gilbert
gto2023
Sam James
Mike Frysinger
Michał Górny
Ed Catmur
David Leverton
Martin Schlemmer
Alex Unleashed
GitWeb