36 Commits

Author	SHA1	Message	Date
Cristian Toader	3802cae959	fixed compilation error on i386 linux by moving sandbox_cfg_t definition	2013-09-10 00:04:43 +03:00
Nick Mathewson	d91c776f61	Fix check-spaces	2013-09-09 16:00:40 -04:00
Nick Mathewson	49f9c4924e	Fix compilation on OSX	2013-09-09 15:59:41 -04:00
Nick Mathewson	cc35d8be84	Fix most of the --enable-gcc-warnings warnings in the sandbox code	2013-09-09 15:14:50 -04:00
Nick Mathewson	00fd0cc5f9	Basic compilation fixes.	2013-09-09 14:55:47 -04:00
Cristian Toader	6a22b29641	passing hints as a const pointer to sandbox_getaddrinfo(), also one tor_free macro fails to compile..	2013-09-06 12:39:56 +03:00
Cristian Toader	55d8b8e578	fixed bug where sandbox_getaddrinfo() would fail when -Sandbox is 0	2013-09-03 16:37:12 +03:00
Cristian Toader	b4b0eddd29	switched to a more generic way of handling the sandbox configuration	2013-09-02 13:54:43 +03:00
Cristian Toader	1ef0b2e1a3	changed how sb getaddrinfo works such that it supports storing multiple results	2013-09-02 11:44:04 +03:00
Cristian Toader	f93ba9a2ef	documentation update for _array functions	2013-08-29 15:44:01 +03:00
Cristian Toader	d5f43b5254	_array filter functions now rely on final NULL parameter	2013-08-29 15:42:30 +03:00
Cristian Toader	ce04d2a622	replaced boolean char with int	2013-08-29 15:19:49 +03:00
Cristian Toader	8e2b9d2844	small fixes in documentation and sandbox_getaddrinfo()	2013-08-29 12:41:17 +03:00
Cristian Toader	6cae5d706c	Added doxygen struct doc and replaced func() with funct(void)	2013-08-28 20:01:52 +03:00
Cristian Toader	8b8f87a06a	removed PARAM_LEN	2013-08-28 19:56:42 +03:00
Cristian Toader	36aeca0ecf	fix for getaddrinfo open syscall	2013-08-19 13:56:50 +03:00
Cristian Toader	372e0f91fd	added comments for sandbox.h	2013-08-15 00:09:07 +03:00
Cristian Toader	8a85a48b9d	attempt to add stat64 filename filters; failed due to getaddrinfo..	2013-08-12 21:14:43 +03:00
Cristian Toader	44a4464cf6	fixed memory leak, added array filter support	2013-08-10 18:04:48 +03:00
Cristian Toader	a960e56c68	multi-configuration support using sandbox_t struct	2013-08-05 16:01:31 +03:00
Cristian Toader	356b646976	added execve and multi-configuration support	2013-08-05 15:40:23 +03:00
Cristian Toader	442f256f25	switched to a design using filters as function pointer arrays	2013-07-30 21:23:30 +03:00
Cristian Toader	871e5b35a8	small filter changes; openat as separate function	2013-07-30 19:25:56 +03:00
Cristian Toader	8022def6f0	added openat parameter filter	2013-07-29 16:30:39 +03:00
Cristian Toader	6d5b0367f6	Changes as suggested by nickm ... - char* to const char* and name refactoring - workaround for accept4 syscall	2013-07-29 14:46:47 +03:00
Cristian Toader	626a2b23de	integrated context for dynamic filters	2013-07-25 14:08:02 +03:00
Cristian Toader	3dfe1c0639	initia stages of runtime dynamic filters	2013-07-25 13:25:20 +03:00
Cristian Toader	abe082e7d0	dynamic parameter filter bug fixes	2013-07-24 17:15:57 +03:00
Cristian Toader	962d814e52	dynamic parameter filter (prototype, not tested)	2013-07-24 17:06:06 +03:00
Cristian Toader	e1410f20d7	added support for multiple parameters	2013-07-23 14:22:31 +03:00
Cristian Toader	c15d09293b	added experimental support for open syscall path param	2013-07-23 14:01:53 +03:00
Cristian Toader	8b12170f23	added support for numeric parameters, tested with rt_sigaction	2013-07-23 10:49:56 +03:00
Cristian Toader	7cf1dbfd51	changed paramfilter type to intptr_t	2013-07-23 10:14:25 +03:00
Cristian Toader	e7e2efb717	Added getter for protected parameter	2013-07-18 18:21:37 +03:00
Cristian Toader	673349c42e	Repair of some of the lost parameter filters history	2013-07-18 18:03:10 +03:00
Cristian Toader	f9c1ba6493	Add a basic seccomp2 syscall filter on Linux ... It's controlled by the new Sandbox argument. Right now, it's rather coarse-grained, it's Linux-only, and it may break some features.	2013-07-11 09:13:13 -04:00