aboutsummaryrefslogtreecommitdiff
path: root/src/jail.c
Commit message (Collapse)AuthorAge
* force non-zero via setuid/setgidToni Uhlig2020-06-27
| | | | | | * added TODO for root user mapping (if someone logged in as root) Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* event buffer valgrind memcheck supportToni Uhlig2019-07-23
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* Merge branch 'feature/jail_packet'lns2019-02-04
|\
| * Introduced the protocol->jail binary packet.feature/jail_packetlns2019-02-04
| | | | | | | | | | | | | | | | We are using a handler/callback functions to obtain additional information from the protocol handler and transmit it to the sandbox. Signed-off-by: lns <matzeton@googlemail.com>
| * setup basic jail packet structs/funcsToni Uhlig2018-08-11
| | | | | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* | adjusted allowed/disabled syscalls regarding OpenWrt compatibility, enable ↵Toni Uhlig2019-01-24
|/ | | | | | ptrace support for sandboxed apps (disabled by default), setsid/setpgrp during jail init Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* user-namepsace: use macro instead of commenting out uid-mapping setuplns2018-08-10
| | | | Signed-off-by: lns <matzeton@googlemail.com>
* use potd event buffer as epoll data instead of a fdlns2018-08-07
| | | | Signed-off-by: lns <matzeton@googlemail.com>
* additional autoconf check for ambient raise securebit to support kernels ↵Toni Uhlig2018-08-02
| | | | | | prior 4.3 Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* set PR_SET_SECUREBITS and PR_SET_NO_NEW_PRIVSlns2018-08-02
| | | | Signed-off-by: lns <matzeton@googlemail.com>
* Merge branch 'master' of ssh://127.0.0.1:2223/git/potdlns2018-07-23
|\
| * fixed typo, temporarily disabled selftest functions (for some reason they ↵Toni Uhlig2018-07-20
| | | | | | | | | | | | dont work on CI) Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* | force flawfinder to ignore false-positives for correctly used functions such ↵lns2018-07-23
|/ | | | | | as realpath, snprintf, vsnprintf, etc Signed-off-by: lns <matzeton@googlemail.com>
* ArchLinux: fixed compiler warnings (libc functions marked withlns2018-07-18
| | | | | | warn_unused_result) Signed-off-by: lns <matzeton@googlemail.com>
* Copyright info updatedToni Uhlig2018-07-18
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* updated copyright informationsToni Uhlig2018-07-11
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* libseccomp is now optional but still recommendedToni Uhlig2018-06-25
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* fixed blacklisting issues after safe_chroot, main jail-client process does ↵Toni Uhlig2018-06-23
| | | | | | not chroot anymore Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* improved filesystem managment (blacklisting, mounting read-only/read-write ↵Toni Uhlig2018-06-23
| | | | | | objects), improved jail/pty handling Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* check if a file path is an mountpoint (not only directories)Toni Uhlig2018-06-18
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* jail multiple netns mount fixToni Uhlig2018-06-17
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* POTD skeleton.lns2018-06-13
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Powered by cgit, Themed by Ted Yin.