aboutsummaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Fix behavior of utimensat(..., AT_EMPTY_PATH)Mike Gilbert2024-11-041-1/+1
* Fix SIGSEGV in gtest death tests due to small stackSv. Lockal2024-01-271-5/+29
* egetcwd: fix some edge casesOskari Pirhonen2023-08-081-5/+5
* resolve_dirfd_path: use separate buffer for readlinkMike Gilbert2023-08-051-4/+5
* libsbutil: add sbio_faccessat and use it in sb_existsMike Gilbert2023-08-031-0/+1
* libsandbox: skip checking access() without W_OK or R_OK modeMike Gilbert2023-08-031-1/+4
* libsandbox: always permit access to '/memfd:'Mike Gilbert2023-07-311-0/+6
* libsandbox: add support for fchown/fchmod on linuxMichael Orlitzky2023-06-221-0/+17
* libsandbox: add lutimes to symlink_funcMike Gilbert2023-06-121-0/+1
* change FS calls to use 64-bit interfaces explicitlyMike Frysinger2021-11-051-7/+7
* libsandbox: drop lstat check for symlink funcsMike Frysinger2021-10-271-28/+23
* libsandbox: drop old *.py[co] hack #775416Mike Frysinger2021-10-221-14/+0
* libsandbox: add xattr wrappers #672566Mike Frysinger2021-10-221-9/+15
* libsandbox: add renameat2 wrapperMike Frysinger2021-10-211-0/+2
* libsandbox: tweak const markings on env varsMike Frysinger2021-10-211-1/+1
* libsandbox: fix incorrect indentationMike Frysinger2021-10-181-8/+9
* libsandbox: add SANDBOX_METHOD settingMike Frysinger2021-10-181-0/+10
* libsandbox: adjust hard-coded denial for /var/log/sandboxMike Gilbert2021-09-071-9/+9
* libsandbox: fix error handling of absolute_path() in check_syscall()Sergei Trofimovich2021-04-021-1/+4
* libsandbox: try harder not to regenerate environmentSergei Trofimovich2021-03-131-0/+9
* check_syscall(): turn internal sandbox violation into denywriteSergei Trofimovich2020-05-311-0/+9
* libsandbox/libsandbox.c: add errno output for internal sandbox violationsSergei Trofimovich2020-05-311-2/+8
* exec*() wrappers: never mutate 'environ' of host processSergei Trofimovich2019-01-081-47/+45
* libsandbox: resolve_dirfd_path /proc/<pid> namespace safetyZac Medico2018-12-021-1/+8
* Disable environment propagation if sandbox is disabledMichał Górny2018-02-121-0/+5
* Ensure LD_LIBRARY_PATH is copied to my_envv2.12Peter Levine2017-10-031-2/+2
* libsandbox: Fix path matching not to dumbly match prefixesMichał Górny2017-10-031-3/+19
* Remove no-longer-necessary symlink hack in ACLMichał Górny2017-10-031-40/+0
* libsandbox: whitelist renameat/symlinkat as symlink funcsMike Frysinger2017-03-101-1/+3
* libsandbox: whitelist execvpeMike Frysinger2016-03-301-0/+1
* libsandbox: make check_syscall ISE a little more usefulMike Frysinger2016-03-291-2/+2
* libsandbox: use ptrace on apps that interpose their own allocatorMike Frysinger2016-02-161-27/+45
* libsandbox: do not unnecessarily dereference symlinksMike Frysinger2015-09-281-3/+12
* libsandbox: improve debugging output a bitMike Frysinger2015-09-201-2/+4
* libsandbox: fix handling of dangling symlinksMike Frysinger2015-09-201-5/+18
* libsandbox: egetcwd: fix handling of NULL inputsMike Frysinger2015-09-201-4/+16
* libsandbox: preserve more SANDBOX env varsMike Frysinger2013-02-231-52/+232
* libsandbox: fix early var initMike Frysinger2013-02-241-8/+25
* add a new message env varMike Frysinger2013-02-241-0/+4
* delete unused sandbox env varsMike Frysinger2013-02-241-3/+0
* libsandbox: add some likely/unlikely settingsMike Frysinger2013-02-241-7/+5
* sandbox: allow log files to fallback to tmpdirMike Frysinger2012-12-241-2/+2
* precompile headers.h to speed up build slightlyMike Frysinger2012-07-031-7/+0
* libsandbox: kill off SB_MEM_DEBUGMike Frysinger2012-06-231-17/+0
* significantly overhaul output helpersMike Frysinger2012-06-231-114/+25
* libsandbox: add missing close to logfile fdMike Frysinger2012-03-071-2/+5
* libsandbox: mark internal fds with O_CLOEXECMike Frysinger2012-03-071-2/+2
* libsandbox: push down constructor initMike Frysinger2012-03-051-37/+6
* libsandbox: invert debug checking order to avoid uninitialized variablesMike Frysinger2011-07-081-1/+1
* libsandbox: tweak code to avoid undefined behavior warningsMike Frysinger2011-07-081-1/+1