aboutsummaryrefslogtreecommitdiff
path: root/src/common/sandbox.c
AgeCommit message (Expand)Author
2015-10-15Fix compilation of sandbox.[ch] under musl-libcNick Mathewson
2015-06-15Fix another seccomp2 issueNick Mathewson
2015-06-02Fix sandboxing to work when running as a relayPeter Palfrader
2015-05-28Fix sandbox use with systemd. bug 16212.Nick Mathewson
2015-03-04Merge remote-tracking branch 'public/bug15088_025' into maint-0.2.6Nick Mathewson
2015-03-04Add wait4 to the seccomp2 sandbox allowable syscall listNick Mathewson
2015-02-23Let AF_UNIX connections through the sandboxNick Mathewson
2015-02-11Fix crash on glibc __libc_message()Nick Mathewson
2015-01-02Bump copyright dates to 2015, in case someday this matters.Nick Mathewson
2014-12-30Fix a memory leak in tor-resolveNick Mathewson
2014-12-23tweak whitespace; log bad socket family if bug occursNick Mathewson
2014-12-23Add the transparent proxy getsockopt to the sandboxFrancisco Blas Izquierdo Riera (klondike)
2014-10-28Add another year to our copyright dates.Nick Mathewson
2014-09-29Merge remote-tracking branch 'origin/maint-0.2.5'Nick Mathewson
2014-09-29Don't use the getaddrinfo sandbox cache from tor-resolveNick Mathewson
2014-09-02Another clang analyzer complaint wrt HT_GENERATENick Mathewson
2014-08-25Fix another memory leak case in sandbox.c:prot_strings()Nick Mathewson
2014-08-24Remove the non-implemented versions of the sandbox _array() functionsNick Mathewson
2014-08-24Whitespace fixesNick Mathewson
2014-08-21fix memory leak on failure in sandbox.c:prot_strings()Nick Mathewson
2014-08-21Store sandbox params as char *, since that's what they are.Nick Mathewson
2014-06-11Fix a 32-big conversion warning in 11970 fixNick Mathewson
2014-06-11Merge remote-tracking branch 'public/bug11970'Nick Mathewson
2014-06-11Yield a real error in the bug case of sandbox_getaddrinfo()Nick Mathewson
2014-06-08Spell getrlimit correctly.Nick Mathewson
2014-05-29sandbox: allow enough setsockopt to make ConstrainedSockets workNick Mathewson
2014-05-27sandbox: permit listen(2)Nick Mathewson
2014-05-27Log the errno value if seccomp_load() fails.Nick Mathewson
2014-05-27Make sandbox.c compile on armNick Mathewson
2014-05-22sandbox: revamp sandbox_getaddrinfo cacheingNick Mathewson
2014-05-20sandbox: permit gettid, sched_getaffinityNick Mathewson
2014-05-20sandbox: Disallow options which would make us call exec()Nick Mathewson
2014-04-25resolve a typo: sanboxing->sandboxing.Nick Mathewson
2014-04-18Improved message when running sandbox on Linux without libseccompNick Mathewson
2014-04-17Remove spurious libevent include in sandbox.cNick Mathewson
2014-04-16Log the name of the failing syscall on failureNick Mathewson
2014-04-16Sandbox: permit O_NONBLOCK and O_NOCTTY for files we refuseNick Mathewson
2014-04-16Don't allow change to ConnLimit while sandbox is activeNick Mathewson
2014-04-16Use SCMP_CMP_MASKED_EQ to allow flags, not force themNick Mathewson
2014-04-16Get Libevent's PRNG functioning under the linux sandboxNick Mathewson
2014-04-16Introduce arg-counting macros to wrap seccomp_rule_add()Nick Mathewson
2014-04-16Fix sandbox protection for renameNick Mathewson
2014-04-16Upgrade warning about missing interned string for sandboxNick Mathewson
2014-04-16Have sandbox string protection include multi-valued parmeters.Nick Mathewson
2014-04-16Clean up sandbox structures a bitNick Mathewson
2014-04-16Add missing rename function for non-linux platformsNick Mathewson
2014-04-16Drop 'fr' parameter from sandbox code.Nick Mathewson
2014-04-16Add 'rename' to the sandboxed syscallsNick Mathewson
2014-04-16Only intern one copy of each magic string for the sandboxNick Mathewson
2014-04-16Fix some initial sandbox issues.Nick Mathewson