aboutsummaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* exec*() wrappers: never mutate 'environ' of host processSergei Trofimovich2019-01-081-47/+45
* libsandbox: resolve_dirfd_path /proc/<pid> namespace safetyZac Medico2018-12-021-1/+8
* Disable environment propagation if sandbox is disabledMichał Górny2018-02-121-0/+5
* Ensure LD_LIBRARY_PATH is copied to my_envv2.12Peter Levine2017-10-031-2/+2
* libsandbox: Fix path matching not to dumbly match prefixesMichał Górny2017-10-031-3/+19
* Remove no-longer-necessary symlink hack in ACLMichał Górny2017-10-031-40/+0
* libsandbox: whitelist renameat/symlinkat as symlink funcsMike Frysinger2017-03-101-1/+3
* libsandbox: whitelist execvpeMike Frysinger2016-03-301-0/+1
* libsandbox: make check_syscall ISE a little more usefulMike Frysinger2016-03-291-2/+2
* libsandbox: use ptrace on apps that interpose their own allocatorMike Frysinger2016-02-161-27/+45
* libsandbox: do not unnecessarily dereference symlinksMike Frysinger2015-09-281-3/+12
* libsandbox: improve debugging output a bitMike Frysinger2015-09-201-2/+4
* libsandbox: fix handling of dangling symlinksMike Frysinger2015-09-201-5/+18
* libsandbox: egetcwd: fix handling of NULL inputsMike Frysinger2015-09-201-4/+16
* libsandbox: preserve more SANDBOX env varsMike Frysinger2013-02-231-52/+232
* libsandbox: fix early var initMike Frysinger2013-02-241-8/+25
* add a new message env varMike Frysinger2013-02-241-0/+4
* delete unused sandbox env varsMike Frysinger2013-02-241-3/+0
* libsandbox: add some likely/unlikely settingsMike Frysinger2013-02-241-7/+5
* sandbox: allow log files to fallback to tmpdirMike Frysinger2012-12-241-2/+2
* precompile headers.h to speed up build slightlyMike Frysinger2012-07-031-7/+0
* libsandbox: kill off SB_MEM_DEBUGMike Frysinger2012-06-231-17/+0
* significantly overhaul output helpersMike Frysinger2012-06-231-114/+25
* libsandbox: add missing close to logfile fdMike Frysinger2012-03-071-2/+5
* libsandbox: mark internal fds with O_CLOEXECMike Frysinger2012-03-071-2/+2
* libsandbox: push down constructor initMike Frysinger2012-03-051-37/+6
* libsandbox: invert debug checking order to avoid uninitialized variablesMike Frysinger2011-07-081-1/+1
* libsandbox: tweak code to avoid undefined behavior warningsMike Frysinger2011-07-081-1/+1
* libsandbox: catch mktemp related funcsMike Frysinger2011-07-041-0/+9
* libsandbox: handle NULL filenames with futimesatMike Frysinger2011-01-011-2/+5
* libsandbox: fix utimensat regression with NULL filenameMike Frysinger2010-11-261-1/+1
* libsandbox: fix bug in previous dirfd unificationv2.4Mike Frysinger2010-11-231-3/+4
* libsandbox: fix thinko in previous erealpath commitMike Frysinger2010-11-221-2/+2
* libsandbox: handle dirfd in mkdir/open/unlink *at prechecksMike Frysinger2010-11-151-32/+54
* libsandbox: mark rmdir as working on symlinksMike Frysinger2010-08-161-0/+1
* libsandbox: avoid passing same buffer to erealpathMike Frysinger2010-08-151-1/+10
* libsandbox: catch calls to remove()Mike Frysinger2009-12-201-0/+2
* libsandbox: handle fd's w/out files in proc fd/Mike Frysinger2009-10-251-0/+15
* libsbutil: kill off confusing SB_WRITE macroMike Frysinger2009-08-251-7/+15
* libsandbox: handle utimensat with NULL pathsMike Frysinger2009-06-041-6/+15
* libsandbox: test for ERANGE like ENAMETOOLONGMike Frysinger2009-04-081-4/+4
* libsandbox: make sure we use internal strdupMike Frysinger2009-04-081-4/+4
* libsandbox: dump command line whenever a backtrace is shownMike Frysinger2009-04-061-31/+32
* libsandbox: force lock sanity across forksMike Frysinger2009-04-051-10/+9
* libsandbox: add a helper func to copy files to fdsMike Frysinger2009-04-051-20/+32
* libsandbox: bail when processes go away while tracingMike Frysinger2009-04-051-1/+7
* libsandbox: tweak /proc/.../cmdline check for hardenedMike Frysinger2009-04-051-1/+1
* libsandbox: sort system calls alphabeticallyMike Frysinger2009-03-311-25/+25
* libsandbox: fix regression during merge of tracing codeMike Frysinger2009-03-311-2/+2
* libsandbox: handle bad fds with *at() funcsMike Frysinger2009-03-311-0/+6