torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'public/sandbox_fixes_rebased_2'

Browse Source
This commit is contained in:
Nick Mathewson
2014-04-16 23:45:55 -04:00
parent 250b84b8a8 506c890440
commit 4367cbd71b
17 changed files with 1743 additions and 242 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/sandbox_fixes_11351
+13
View File
@@ -0,0 +1,13 @@
o Major features:
- Refinements and improvements to the Linux seccomp2 sandbox code:
the sandbox can now run a test network for multiple hours without
crashing. (Previous crash reasons included: reseeding the OpenSSL PRNG,
seeding the Libevent PRNG, using the wrong combination of CLOEXEC and
NONBLOCK at the same place and time, having server keys, being an
authority, receiving a HUP, or using IPv6.) The sandbox is still
experimental, and more bugs will probably turn up. To try it,
enable "Sandbox 1" on a Linux host.
- Strengthen the Linux seccomp2 sandbox code: the sandbox can now
test the arguments for rename(), and blocks _sysctl() entirely.