torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge branch 'sandbox-aarch64-riscv-fixes' into 'main'

Browse Source 
Fix sandbox on AArch64, RISC-V

Closes #24454

See merge request tpo/core/tor!446
This commit is contained in:
David Goulet
2023-09-18 13:14:51 +00:00
parent 7278c1554d a187fde7f4
commit ca9ca6da04
3 changed files with 232 additions and 73 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/test/test_sandbox.c
+4 -4
View File
@@ -364,22 +364,22 @@ test_sandbox_crypto_equix(void *arg)
struct testcase_t sandbox_tests[] = {
SANDBOX_TEST(is_active, TT_FORK),
/* When Tor is built with fragile compiler-hardening the sandbox is unable to
* filter requests to open files or directories (on systems where glibc uses
* the "open" system call to provide this functionality), as doing so would
/* When Tor is built with fragile compiler-hardening the sandbox is usually
* unable to filter requests to open files or directories, as doing so would
* interfere with the address sanitizer as it retrieves information about the
* running process via the filesystem. Skip these tests in that case as the
* corresponding functions are likely to have no effect and this will cause the
* tests to fail. */
#ifdef ENABLE_FRAGILE_HARDENING
SANDBOX_TEST_SKIPPED(open_filename),
SANDBOX_TEST_SKIPPED(openat_filename),
SANDBOX_TEST_SKIPPED(opendir_dirname),
#else
SANDBOX_TEST_IN_SANDBOX(open_filename),
SANDBOX_TEST_IN_SANDBOX(openat_filename),
SANDBOX_TEST_IN_SANDBOX(opendir_dirname),
#endif /* defined(ENABLE_FRAGILE_HARDENING) */
SANDBOX_TEST_IN_SANDBOX(openat_filename),
SANDBOX_TEST_IN_SANDBOX(chmod_filename),
SANDBOX_TEST_IN_SANDBOX(chown_filename),
SANDBOX_TEST_IN_SANDBOX(rename_filename),