tor/changes
Nick Mathewson 465982012c sandbox: Disallow options which would make us call exec()
None of the things we might exec() can possibly run under the
sanbox, so rather than crash later, we have to refuse to accept the
configuration nice and early.

The longer-term solution is to have an exec() helper, but wow is
that risky.

fixes 12043; bugfix on 0.2.5.1-alpha
2014-05-20 12:21:31 -04:00
..
12032 sandbox: Permit access to stats/dirreq-stats 2014-05-20 12:06:08 -04:00
bug4345 More hacking around spawn_func issues 2014-02-07 13:13:15 -05:00
bug8368 Add contrib/tor.service for use with systemd 2014-04-29 13:17:29 -04:00
bug9635 Give specific warnings when client-side onionskin handshakes fail 2014-03-27 14:15:53 -04:00
bug9781 Log an error reply from tor-fw-helper correctly. 2014-05-12 13:35:01 -04:00
bug10849_023 Forbid TunneledDirConns 0 and PreferTunneledDirConns 0 if being a HS 2014-04-25 14:24:41 -04:00
bug10849_025 Remove TunnelDirConns and PreferTunnelledDirConns 2014-02-11 11:10:55 -05:00
bug11233 Better log message when writing a CR in text mode on windows 2014-03-27 23:48:17 -04:00
bug11469 Use DirPort for uploading descriptors. 2014-05-14 21:49:57 -04:00
bug11605 Make compilation of tor_memdup_nulterm() with dmalloc 2014-04-25 13:52:07 -04:00
bug11608 Make the python test scripts work on python3 2014-04-27 22:54:24 -04:00
bug11609 Don't start sandbox except for CMD_RUN_TOR 2014-05-05 10:29:35 -04:00
bug11618 Changes file for valgrind fixes 2014-04-29 12:53:19 -04:00
bug11623 Changes file for bug 11623 (fix was in 91ff10f6be) 2014-05-01 11:33:17 -04:00
bug11628 New --disable-seccomp option to turn off support for seccomp. 2014-04-28 11:11:50 -04:00
bug11632 Changes file for bug 11632. 2014-04-29 11:58:43 -04:00
bug11633_part1 changes file for last patch 2014-04-29 13:23:54 -04:00
bug11633_part2 Quench clang's complaints with -Wshorten-64-to-32 when time_t is not long. 2014-05-11 23:36:00 -04:00
bug11634 changes file for 11634 documentation fixes 2014-04-28 12:40:23 -04:00
bug11635 Actually put ExtORPortCookieAuthFile into config.c 2014-04-28 12:23:18 -04:00
bug11648 changes file for 11648 2014-05-08 12:01:12 -04:00
bug11654 Fix a misuse of strlcpy() introduced by the #11156 patch. 2014-05-01 12:34:50 -04:00
bug11729 Fix cross-compiling when 128-bit math compiles but won't link 2014-05-05 11:44:02 -04:00
bug11737_diagnostic Check HT_REP_IS_BAD_() when giving a bug-7164 warning. 2014-05-06 13:03:24 -04:00
bug11742 Remove /tor/dbg-stability.txt URL. 2014-05-05 11:21:35 +02:00
bug11743 Improve bug11743 message a bit. 2014-05-07 22:23:19 -04:00
bug11750 Use siphash on channel/circuit-id map too 2014-05-05 12:13:58 -04:00
bug11761 Fix compilation with DEBUG_DNS_CACHE 2014-05-06 10:18:34 -04:00
bug11805 Return success when get_total_system_memory() succeeds. 2014-05-08 00:32:22 -04:00
bug11946 Use tor_getpw{nam,uid} wrappers to fix bug 11946 2014-05-14 13:53:14 -04:00
bug12041 Sandbox: allow access to stats/bridge-stats 2014-05-20 11:57:29 -04:00
bug12043 sandbox: Disallow options which would make us call exec() 2014-05-20 12:21:31 -04:00
diagnose_8387 Log info on ancient one-hop circuits in heartbeat 2014-04-29 14:02:12 -04:00
md_leak_bug Stop leaking memory in error cases of md parsing 2014-04-29 13:00:00 -04:00
msvc_fix changes file for gisle vanem's MSVC fix 2014-05-12 11:49:17 -04:00
ticket8368 Put tor.service in the right place, and autoconfify it 2014-04-29 13:17:30 -04:00
ticket8966 Deal with the aftermath of sorting contrib 2014-04-28 11:59:55 -04:00