summaryrefslogtreecommitdiff
path: root/src/common/sandbox.c
AgeCommit message (Expand)Author
2014-04-18Improved message when running sandbox on Linux without libseccompNick Mathewson
2014-04-17Remove spurious libevent include in sandbox.cNick Mathewson
2014-04-16Log the name of the failing syscall on failureNick Mathewson
2014-04-16Sandbox: permit O_NONBLOCK and O_NOCTTY for files we refuseNick Mathewson
2014-04-16Don't allow change to ConnLimit while sandbox is activeNick Mathewson
2014-04-16Use SCMP_CMP_MASKED_EQ to allow flags, not force themNick Mathewson
2014-04-16Get Libevent's PRNG functioning under the linux sandboxNick Mathewson
2014-04-16Introduce arg-counting macros to wrap seccomp_rule_add()Nick Mathewson
2014-04-16Fix sandbox protection for renameNick Mathewson
2014-04-16Upgrade warning about missing interned string for sandboxNick Mathewson
2014-04-16Have sandbox string protection include multi-valued parmeters.Nick Mathewson
2014-04-16Clean up sandbox structures a bitNick Mathewson
2014-04-16Add missing rename function for non-linux platformsNick Mathewson
2014-04-16Drop 'fr' parameter from sandbox code.Nick Mathewson
2014-04-16Add 'rename' to the sandboxed syscallsNick Mathewson
2014-04-16Only intern one copy of each magic string for the sandboxNick Mathewson
2014-04-16Fix some initial sandbox issues.Nick Mathewson
2014-04-10Log a backtrace when the sandbox finds a failureNick Mathewson
2014-04-10Make the sandbox code allow the writev() syscall.Nick Mathewson
2014-03-13Fix some leaks/missed checks in the unit testsNick Mathewson
2014-02-02Add a sandbox rule to allow IP_TRANSPARENTNick Mathewson
2014-01-17whitespace fixesNick Mathewson
2014-01-06Fix some seccomp2 issuesNick Mathewson
2013-11-18Merge branch 'backtrace_squashed'Nick Mathewson
2013-11-18Add a sighandler-safe logging mechanismNick Mathewson
2013-09-16Fix a memory leak on getaddrinfo in sandbox. Found by coverityNick Mathewson
2013-09-16Clean up malloc issues in sandbox.cNick Mathewson
2013-09-13Merge remote-tracking branch 'ctoader/gsoc-cap-stage2'Nick Mathewson
2013-09-12fixed compilation bug on i386 due to previous fixCristian Toader
2013-09-12bug fix: syscalls send and recv not supported for x86_64 with libseccomp 1.0.1Cristian Toader
2013-09-12remove debugging codeCristian Toader
2013-09-12added extra buffer and limit to mprotect not to exceed the length of that bufferCristian Toader
2013-09-10added filter protection for string parameter memoryCristian Toader
2013-09-10fixed socket syscall bugCristian Toader
2013-09-09Fix check-spacesNick Mathewson
2013-09-09Fix compilation on OSXNick Mathewson
2013-09-09Do not try to add non-existent syscalls.Nick Mathewson
2013-09-09Fix a warning related to SCMP_CMP definition in header.Nick Mathewson
2013-09-09Fix most of the --enable-gcc-warnings warnings in the sandbox codeNick Mathewson
2013-09-09Remove a usage of free()Nick Mathewson
2013-09-09Basic compilation fixes.Nick Mathewson
2013-09-06added missing documentation for sandbox functionsCristian Toader
2013-09-06passing hints as a const pointer to sandbox_getaddrinfo(), also one tor_free ...Cristian Toader
2013-09-06replaced strdup with tor_strdupCristian Toader
2013-09-06replaced malloc/free with tor_malloc/tor_freeCristian Toader
2013-09-06switched string lengths from int to size_t in prot_strings()Cristian Toader
2013-09-03fixed bug where sandbox_getaddrinfo() would fail when -Sandbox is 0Cristian Toader
2013-09-02switched to a more generic way of handling the sandbox configurationCristian Toader
2013-09-02added contingency message to test for sandbox_getaddrinfoCristian Toader
2013-09-02make check-spaces fixCristian Toader
7apu2bq3rhoylwmucxizk54afw5jyda7pho4j5zdcqpwkufke7zdzwad.onion