Commits · fef65fa64341fb70df0e7b34d91d3b08a74e7aad · The Tor Project / Core / Tor · GitLab

May 20, 2014
- sandbox: permit gettid, sched_getaffinity · fef65fa6
  Nick Mathewson authored May 20, 2014
  fef65fa6
- sandbox: Disallow options which would make us call exec() · 46598201
  Nick Mathewson authored May 20, 2014
  46598201
Apr 26, 2014
- resolve a typo: sanboxing->sandboxing. · 9735ca6e
  Nick Mathewson authored Apr 25, 2014
  
  9735ca6e
Apr 18, 2014
- Improved message when running sandbox on Linux without libseccomp · b8fe8ee7
  Nick Mathewson authored Apr 18, 2014
  b8fe8ee7
Apr 17, 2014
- Remove spurious libevent include in sandbox.c · 9c3f7a6d
  Nick Mathewson authored Apr 17, 2014
  
  9c3f7a6d
- Log the name of the failing syscall on failure · f4149181
  Nick Mathewson authored Apr 16, 2014
  
  f4149181
- Sandbox: permit O_NONBLOCK and O_NOCTTY for files we refuse · f70cf998
  Nick Mathewson authored Apr 16, 2014
  f70cf998
- Don't allow change to ConnLimit while sandbox is active · 61949707
  Nick Mathewson authored Apr 16, 2014
  
  61949707
- Use SCMP_CMP_MASKED_EQ to allow flags, not force them · 69eb2788
  Nick Mathewson authored Apr 16, 2014
  69eb2788
- Get Libevent's PRNG functioning under the linux sandbox · e6785ee1
  Nick Mathewson authored Apr 16, 2014
  e6785ee1
- Introduce arg-counting macros to wrap seccomp_rule_add() · 8dc6755f
  Nick Mathewson authored Apr 16, 2014
  8dc6755f
- Fix sandbox protection for rename · 12028c29
  Nick Mathewson authored Apr 16, 2014
  12028c29
- Upgrade warning about missing interned string for sandbox · 739a5259
  Nick Mathewson authored Apr 16, 2014
  
  739a5259
- Have sandbox string protection include multi-valued parmeters. · 5aaac938
  Nick Mathewson authored Apr 16, 2014
  
  5aaac938
- Clean up sandbox structures a bit · f268101a
  Nick Mathewson authored Apr 16, 2014
  f268101a
- Add missing rename function for non-linux platforms · 6807b76a
  Nick Mathewson authored Apr 11, 2014
  
  6807b76a
- Drop 'fr' parameter from sandbox code. · 71eaebd9
  Nick Mathewson authored Apr 11, 2014
  71eaebd9
- Add 'rename' to the sandboxed syscalls · cbfb8e70
  Nick Mathewson authored Mar 28, 2014
  cbfb8e70
- Only intern one copy of each magic string for the sandbox · 3802e32c
  Nick Mathewson authored Mar 28, 2014
  3802e32c
- Fix some initial sandbox issues. · ae9d6d73
  Nick Mathewson authored Mar 28, 2014
  ae9d6d73
Apr 10, 2014
- Log a backtrace when the sandbox finds a failure · cc9e86db
  Nick Mathewson authored Apr 10, 2014
  cc9e86db
- Make the sandbox code allow the writev() syscall. · 196895ed
  Nick Mathewson authored Apr 10, 2014
  196895ed
Mar 13, 2014
- Fix some leaks/missed checks in the unit tests · 119896cd
  Nick Mathewson authored Mar 13, 2014
  119896cd
Feb 02, 2014
- Add a sandbox rule to allow IP_TRANSPARENT · 25f0eb45
  Nick Mathewson authored Feb 02, 2014
  
  25f0eb45
Jan 17, 2014
- whitespace fixes · 9be105f9
  Nick Mathewson authored Jan 17, 2014
  
  9be105f9
Jan 06, 2014
- Fix some seccomp2 issues · 682c2252
  Nick Mathewson authored Jan 06, 2014
  682c2252
Nov 18, 2013
- Add a sighandler-safe logging mechanism · bd8ad674
  Nick Mathewson authored Jul 19, 2013
  bd8ad674
Sep 17, 2013
- Fix a memory leak on getaddrinfo in sandbox. Found by coverity · 1825674b
  Nick Mathewson authored Sep 16, 2013
  
  1825674b
- Clean up malloc issues in sandbox.c · 4ea9fbcd
  Nick Mathewson authored Sep 16, 2013
  4ea9fbcd
Sep 12, 2013
- fixed compilation bug on i386 due to previous fix · 7cf1b9cc
  Cristian Toader authored Sep 12, 2013
  
  7cf1b9cc
- bug fix: syscalls send and recv not supported for x86_64 with libseccomp 1.0.1 · d2836c87
  Cristian Toader authored Sep 12, 2013
  
  d2836c87
- remove debugging code · 0a3d1685
  Cristian Toader authored Sep 12, 2013
  
  0a3d1685
- added extra buffer and limit to mprotect not to exceed the length of that buffer · 4702cdc9
  Cristian Toader authored Sep 12, 2013
  
  4702cdc9
Sep 10, 2013
- added filter protection for string parameter memory · 79f94e23
  Cristian Toader authored Sep 10, 2013
  
  79f94e23
Sep 09, 2013
- fixed socket syscall bug · 8e003b1c
  Cristian Toader authored Sep 10, 2013
  
  8e003b1c
- Fix check-spaces · d91c776f
  Nick Mathewson authored Sep 09, 2013
  
  d91c776f
- Fix compilation on OSX · 49f9c492
  Nick Mathewson authored Sep 09, 2013
  
  49f9c492
- Do not try to add non-existent syscalls. · e9ec0cb5
  Nick Mathewson authored Sep 09, 2013
  
  e9ec0cb5
- Fix a warning related to SCMP_CMP definition in header. · a6ada1a5
  Nick Mathewson authored Sep 09, 2013
  a6ada1a5
- Fix most of the --enable-gcc-warnings warnings in the sandbox code · cc35d8be
  Nick Mathewson authored Sep 09, 2013
  
  cc35d8be