aboutsummaryrefslogtreecommitdiff
path: root/src/lib/sandbox
AgeCommit message (Expand)Author
2023-09-18Merge branch 'sandbox-aarch64-riscv-fixes' into 'main'David Goulet
2023-05-31Merge branch 'maint-0.4.7'David Goulet
2023-05-31Update CI builds to Debian Bullseye, fix associated compatibility bugsMicah Elizabeth Scott
2023-05-10sandbox: allow stack mmap with prot_noneMicah Elizabeth Scott
2022-12-20Enable IP_BIND_ADDRESS_NO_PORT if supportedAlex Xu (Hello71)
2022-06-15Enable IP_BIND_ADDRESS_NO_PORT if supportedAlex Xu (Hello71)
2022-06-13sandbox: Allow use with fragile hardening on AArch64 and elsewhereSimon South
2022-06-13sandbox: Filter "fchownat" on systems using generic syscallsSimon South
2022-06-13sandbox: Filter "fchmodat" on systems using generic syscallsSimon South
2022-06-13sandbox: Filter "newfstatat" on systems using generic syscallsSimon South
2022-06-13sandbox: Filter "renameat", "renameat2" where "rename" unavailableSimon South
2022-06-13sandbox: Assume "openat" syscall is used where "open" is unavailableSimon South
2022-05-09Merge branch 'maint-0.4.6' into maint-0.4.7Alexander Færøy
2022-05-09Merge branch 'maint-0.4.7'Alexander Færøy
2022-05-09Merge branch 'maint-0.4.5' into maint-0.4.6Alexander Færøy
2022-05-09sandbox: Permit rseq syscall as wellpmu-ipf
2022-05-04sandbox: replace SCMP_CMP_NEG with masked equality checksPierre Bourdon
2022-04-30sandbox: filter {chown,chmod,rename} via their *at variant on Aarch64Pierre Bourdon
2022-04-30sandbox: fix openat filtering on AArch64Pierre Bourdon
2022-03-28Merge branch 'maint-0.4.6'David Goulet
2022-03-28Merge branch 'maint-0.4.5' into maint-0.4.6David Goulet
2022-03-28Merge branch 'tor-gitlab/mr/556' into maint-0.4.5David Goulet
2022-03-27Sandbox: Permit the clone3 system callNick Mathewson
2021-11-05sandbox: Allow "statx" syscall on i386 for glibc 2.33Simon South
2021-11-05sandbox: Allow "clock_gettime64" syscall where definedSimon South
2021-11-05sandbox: Filter "chown32" syscall on i386Simon South
2021-10-14Merge remote-tracking branch 'tor-gitlab/mr/433' into mainAlexander Færøy
2021-09-28sandbox: Allow use with fragile hardeningSimon South
2021-09-09Fix compilation error when __NR_time is not defined. #40465Daniel Pinto
2021-05-07Merge branch 'maint-0.4.5' into maint-0.4.6Nick Mathewson
2021-05-07Merge branch 'maint-0.4.6'Nick Mathewson
2021-05-07Add a sandbox workaround for Glibc 2.33Nick Mathewson
2021-03-12Run "make autostyle" in advance of new series.Nick Mathewson
2021-03-12Update copyrights to 2021, using "make update-copyright"Nick Mathewson
2020-12-08Fix a couple of documentation comments related to #40094Nick Mathewson
2020-11-12When handling includes, detect missing interned strings earlier.Nick Mathewson
2020-08-12Merge remote-tracking branch 'tor-gitlab/mr/62'Nick Mathewson
2020-07-29Merge branch 'maint-0.4.4'Nick Mathewson
2020-07-29Merge remote-tracking branch 'tor-gitlab/mr/68' into maint-0.4.4Nick Mathewson
2020-07-29Fix startup crash with seccomp sandbox enabled #40072Daniel Pinto
2020-07-21Merge branch 'maint-0.4.4'Nick Mathewson
2020-07-21Merge remote-tracking branch 'tor-gitlab/mr/68' into maint-0.4.4Nick Mathewson
2020-07-21Merge branch 'maint-0.4.4'Nick Mathewson
2020-07-21Merge remote-tracking branch 'tor-gitlab/mr/67' into maint-0.4.4Nick Mathewson
2020-07-20Fix seccomp sandbox rules for openat #27315Daniel Pinto
2020-07-20Fix seccomp sandbox rules for opening directories #40020Daniel Pinto
2020-07-20Fix seccomp sandbox rules for openat #27315Daniel Pinto
2020-07-15Add support for patterns on %include #25140Daniel Pinto
2020-07-14Rename blacklist and whitelist wordingDavid Goulet
2020-07-01Merge branch 'maint-0.4.3' into maint-0.4.4George Kadianakis