Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | attempt to add stat64 filename filters; failed due to getaddrinfo.. | Cristian Toader | 2013-08-12 |
| | |||
* | fixed memory leak, added array filter support | Cristian Toader | 2013-08-10 |
| | |||
* | updated filters to work with orport | Cristian Toader | 2013-08-09 |
| | |||
* | orport progress (not functional), nickm suggested fixes | Cristian Toader | 2013-08-07 |
| | |||
* | multi-configuration support using sandbox_t struct | Cristian Toader | 2013-08-05 |
| | |||
* | added execve and multi-configuration support | Cristian Toader | 2013-08-05 |
| | |||
* | fixes suggested by nickm | Cristian Toader | 2013-08-05 |
| | |||
* | removed access, set_robust_list, set_thread_area, set_tid_address, uname; ↵ | Cristian Toader | 2013-07-31 |
| | | | | added sb_poll | ||
* | sigprocmask, epoll_ctl, prctl, mprotect, flock, futex, mremap | Cristian Toader | 2013-07-31 |
| | |||
* | epoll_ctl | Cristian Toader | 2013-07-31 |
| | |||
* | fcntl64 | Cristian Toader | 2013-07-30 |
| | |||
* | clean stable version | Cristian Toader | 2013-07-30 |
| | |||
* | fully switched to function pointers; problems with socketcall parameters | Cristian Toader | 2013-07-30 |
| | |||
* | switched to a design using filters as function pointer arrays | Cristian Toader | 2013-07-30 |
| | |||
* | removed open flags (postponed), added mmap2 flags | Cristian Toader | 2013-07-30 |
| | |||
* | small filter changes; openat as separate function | Cristian Toader | 2013-07-30 |
| | |||
* | added openat parameter filter | Cristian Toader | 2013-07-29 |
| | |||
* | Changes as suggested by nickm | Cristian Toader | 2013-07-29 |
| | | | | | - char* to const char* and name refactoring - workaround for accept4 syscall | ||
* | Investigated access4 syscall problem, small changes to filter. | Cristian Toader | 2013-07-26 |
| | |||
* | integrated context for dynamic filters | Cristian Toader | 2013-07-25 |
| | |||
* | initia stages of runtime dynamic filters | Cristian Toader | 2013-07-25 |
| | |||
* | dynamic parameter filter bug fixes | Cristian Toader | 2013-07-24 |
| | |||
* | dynamic parameter filter (prototype, not tested) | Cristian Toader | 2013-07-24 |
| | |||
* | added support for multiple parameters | Cristian Toader | 2013-07-23 |
| | |||
* | added experimental support for open syscall path param | Cristian Toader | 2013-07-23 |
| | |||
* | added support for numeric parameters, tested with rt_sigaction | Cristian Toader | 2013-07-23 |
| | |||
* | changed paramfilter type to intptr_t | Cristian Toader | 2013-07-23 |
| | |||
* | (undo) git test.. | Cristian Toader | 2013-07-18 |
| | |||
* | git test.. | Cristian Toader | 2013-07-18 |
| | |||
* | Added getter for protected parameter | Cristian Toader | 2013-07-18 |
| | |||
* | Repair of some of the lost parameter filters history | Cristian Toader | 2013-07-18 |
| | |||
* | cosmetic cleanups | Roger Dingledine | 2013-07-14 |
| | |||
* | put sandbox.h in the tarball, so the tarball builds | Roger Dingledine | 2013-07-13 |
| | |||
* | Merge remote-tracking branch 'public/gsoc-ctoader-cap-phase1-squashed' | Nick Mathewson | 2013-07-12 |
|\ | |||
| * | Add a basic seccomp2 syscall filter on Linux | Cristian Toader | 2013-07-11 |
| | | | | | | | | | | It's controlled by the new Sandbox argument. Right now, it's rather coarse-grained, it's Linux-only, and it may break some features. | ||
* | | Remove a bogus semicolon spotted by Gisle Vanem | Nick Mathewson | 2013-07-11 |
| | | |||
* | | Merge remote-tracking branch 'origin/maint-0.2.4' | Nick Mathewson | 2013-07-08 |
|\ \ | |||
| * \ | Merge branch 'bug9200' into maint-0.2.4 | Nick Mathewson | 2013-07-08 |
| |\ \ | |||
| | * | | Add a comment and a check for why flag indices will be <= 63 | Nick Mathewson | 2013-07-08 |
| | | | | |||
| | * | | FIx undefined behavior in dirvote.c | Nick Mathewson | 2013-07-03 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix a bug in the voting algorithm that could yield incorrect results when a non-naming authority declared too many flags. Fixes bug 9200; bugfix on 0.2.0.3-alpha. Found by coverity scan. | ||
* | | | | Merge remote-tracking branch 'karsten/geoip-manual-update-jul2013' | Nick Mathewson | 2013-07-08 |
|\ \ \ \ | |||
| * | | | | Add 2 new manual A1 substitutions. | Karsten Loesing | 2013-07-08 |
| | | | | | |||
* | | | | | Merge remote-tracking branch 'origin/maint-0.2.4' | Nick Mathewson | 2013-07-08 |
|\ \ \ \ \ | |/ / / / |/| / / / | |/ / / | |||
| * | | | Merge remote-tracking branch 'origin/maint-0.2.3' into maint-0.2.4 | Nick Mathewson | 2013-07-08 |
| |\ \ \ | | |/ / | |/| | | |||
| | * | | Merge remote-tracking branch 'origin/maint-0.2.2' into maint-0.2.3 | Nick Mathewson | 2013-07-08 |
| | |\ \ | |||
| | | * | | Update to the July 2013 GeoIP database. | Karsten Loesing | 2013-07-08 |
| | | | | | |||
* | | | | | Merge remote-tracking branch 'linus/bug8530' | Nick Mathewson | 2013-06-29 |
|\ \ \ \ \ | |||
| * | | | | | Invoke binaries in $PATH rather than by absolute path. | Linus Nordberg | 2013-06-18 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | That security measure costs more than it gives. So, keep your PATH sane and we can run this script on more than one system. | ||
| * | | | | | Use CHUTNEY_PATH to find Chutney. | Linus Nordberg | 2013-06-14 |
| | | | | | | |||
| * | | | | | Add make target test-network running traffic tests in a Chutney network. | Linus Nordberg | 2013-06-13 |
| | | | | | | | | | | | | | | | | | | | | | | | | This implements ticket #8530. |