June 2017 - tor-commits - lists.torproject.org

[tor/release-0.3.0] Merge remote-tracking branch 'public/bug22516_029' into maint-0.2.9
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 1c64133cb3b9656fc37c1d8c91e1b4225f889428 Merge: cd7d006 59f2997 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 13:50:49 2017 -0400 Merge remote-tracking branch 'public/bug22516_029' into maint-0.2.9 changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+)

1 0

[tor/maint-0.3.1] Merge branch 'maint-0.2.9' into maint-0.3.0
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 71c701927a27723f0bc9009a044a4bdece55f361 Merge: 493d9cd 1c64133 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 13:52:19 2017 -0400 Merge branch 'maint-0.2.9' into maint-0.3.0 changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+)

1 0

[tor/maint-0.3.1] Merge branch 'maint-0.3.0' into maint-0.3.1
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit eff5e29404980a87b4618e8623c35a363af6cc04 Merge: 5641e27 71c7019 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 13:52:19 2017 -0400 Merge branch 'maint-0.3.0' into maint-0.3.1 changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+)

1 0

[tor/master] Merge branch 'maint-0.3.1'
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 32948ebc5484d766cbf6f561ed41665e5f2fc192 Merge: a3139c9 eff5e29 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 13:52:19 2017 -0400 Merge branch 'maint-0.3.1' changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+)

1 0

[tor/master] Permit the fchmod system call.
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 59f29970fa78bec8c01bd5f16edca8c24b8724f5 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jun 16 14:03:02 2017 -0400 Permit the fchmod system call. Fixes bug 22516; bugfix on 0.2.5.4-alpha. --- changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+) diff --git a/changes/bug22516 b/changes/bug22516 new file mode 100644 index 0000000..f024a3c --- /dev/null +++ b/changes/bug22516 @@ -0,0 +1,5 @@ + o Minor bugfixes (linux seccomp2 sandbox): + - Permit the fchmod system call, to avoid crashing on startup when + starting with the seccomp2 sandbox and an unexpected set of permissions + on the data directory or its contents. Fixes bug 22516; bugfix on + 0.2.5.4-alpha. diff --git a/src/common/sandbox.c b/src/common/sandbox.c index 95c9f83..da96ad8 100644 --- a/src/common/sandbox.c +++ b/src/common/sandbox.c @@ -136,6 +136,9 @@ static int filter_nopar_gen[] = { #ifdef HAVE_PIPE SCMP_SYS(pipe), #endif +#ifdef __NR_fchmod + SCMP_SYS(fchmod), +#endif SCMP_SYS(fcntl), SCMP_SYS(fstat), #ifdef __NR_fstat64

1 0

[tor/master] Merge remote-tracking branch 'public/bug22516_029' into maint-0.2.9
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 1c64133cb3b9656fc37c1d8c91e1b4225f889428 Merge: cd7d006 59f2997 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 13:50:49 2017 -0400 Merge remote-tracking branch 'public/bug22516_029' into maint-0.2.9 changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+)

1 0

[tor/master] Merge branch 'maint-0.3.0' into maint-0.3.1
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit eff5e29404980a87b4618e8623c35a363af6cc04 Merge: 5641e27 71c7019 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 13:52:19 2017 -0400 Merge branch 'maint-0.3.0' into maint-0.3.1 changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+)

1 0

[tor/release-0.2.9] Permit the fchmod system call.
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 59f29970fa78bec8c01bd5f16edca8c24b8724f5 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jun 16 14:03:02 2017 -0400 Permit the fchmod system call. Fixes bug 22516; bugfix on 0.2.5.4-alpha. --- changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+) diff --git a/changes/bug22516 b/changes/bug22516 new file mode 100644 index 0000000..f024a3c --- /dev/null +++ b/changes/bug22516 @@ -0,0 +1,5 @@ + o Minor bugfixes (linux seccomp2 sandbox): + - Permit the fchmod system call, to avoid crashing on startup when + starting with the seccomp2 sandbox and an unexpected set of permissions + on the data directory or its contents. Fixes bug 22516; bugfix on + 0.2.5.4-alpha. diff --git a/src/common/sandbox.c b/src/common/sandbox.c index 95c9f83..da96ad8 100644 --- a/src/common/sandbox.c +++ b/src/common/sandbox.c @@ -136,6 +136,9 @@ static int filter_nopar_gen[] = { #ifdef HAVE_PIPE SCMP_SYS(pipe), #endif +#ifdef __NR_fchmod + SCMP_SYS(fchmod), +#endif SCMP_SYS(fcntl), SCMP_SYS(fstat), #ifdef __NR_fstat64

1 0

[tor/maint-0.3.1] Permit the fchmod system call.
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 59f29970fa78bec8c01bd5f16edca8c24b8724f5 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jun 16 14:03:02 2017 -0400 Permit the fchmod system call. Fixes bug 22516; bugfix on 0.2.5.4-alpha. --- changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+) diff --git a/changes/bug22516 b/changes/bug22516 new file mode 100644 index 0000000..f024a3c --- /dev/null +++ b/changes/bug22516 @@ -0,0 +1,5 @@ + o Minor bugfixes (linux seccomp2 sandbox): + - Permit the fchmod system call, to avoid crashing on startup when + starting with the seccomp2 sandbox and an unexpected set of permissions + on the data directory or its contents. Fixes bug 22516; bugfix on + 0.2.5.4-alpha. diff --git a/src/common/sandbox.c b/src/common/sandbox.c index 95c9f83..da96ad8 100644 --- a/src/common/sandbox.c +++ b/src/common/sandbox.c @@ -136,6 +136,9 @@ static int filter_nopar_gen[] = { #ifdef HAVE_PIPE SCMP_SYS(pipe), #endif +#ifdef __NR_fchmod + SCMP_SYS(fchmod), +#endif SCMP_SYS(fcntl), SCMP_SYS(fstat), #ifdef __NR_fstat64

1 0

[tor/release-0.3.0] Permit the fchmod system call.
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 59f29970fa78bec8c01bd5f16edca8c24b8724f5 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jun 16 14:03:02 2017 -0400 Permit the fchmod system call. Fixes bug 22516; bugfix on 0.2.5.4-alpha. --- changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+) diff --git a/changes/bug22516 b/changes/bug22516 new file mode 100644 index 0000000..f024a3c --- /dev/null +++ b/changes/bug22516 @@ -0,0 +1,5 @@ + o Minor bugfixes (linux seccomp2 sandbox): + - Permit the fchmod system call, to avoid crashing on startup when + starting with the seccomp2 sandbox and an unexpected set of permissions + on the data directory or its contents. Fixes bug 22516; bugfix on + 0.2.5.4-alpha. diff --git a/src/common/sandbox.c b/src/common/sandbox.c index 95c9f83..da96ad8 100644 --- a/src/common/sandbox.c +++ b/src/common/sandbox.c @@ -136,6 +136,9 @@ static int filter_nopar_gen[] = { #ifdef HAVE_PIPE SCMP_SYS(pipe), #endif +#ifdef __NR_fchmod + SCMP_SYS(fchmod), +#endif SCMP_SYS(fcntl), SCMP_SYS(fstat), #ifdef __NR_fstat64

1 0