June 2017 - tor-commits - lists.torproject.org

[tor/release-0.3.0] Permit the fchmod system call.
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 59f29970fa78bec8c01bd5f16edca8c24b8724f5 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jun 16 14:03:02 2017 -0400 Permit the fchmod system call. Fixes bug 22516; bugfix on 0.2.5.4-alpha. --- changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+) diff --git a/changes/bug22516 b/changes/bug22516 new file mode 100644 index 0000000..f024a3c --- /dev/null +++ b/changes/bug22516 @@ -0,0 +1,5 @@ + o Minor bugfixes (linux seccomp2 sandbox): + - Permit the fchmod system call, to avoid crashing on startup when + starting with the seccomp2 sandbox and an unexpected set of permissions + on the data directory or its contents. Fixes bug 22516; bugfix on + 0.2.5.4-alpha. diff --git a/src/common/sandbox.c b/src/common/sandbox.c index 95c9f83..da96ad8 100644 --- a/src/common/sandbox.c +++ b/src/common/sandbox.c @@ -136,6 +136,9 @@ static int filter_nopar_gen[] = { #ifdef HAVE_PIPE SCMP_SYS(pipe), #endif +#ifdef __NR_fchmod + SCMP_SYS(fchmod), +#endif SCMP_SYS(fcntl), SCMP_SYS(fstat), #ifdef __NR_fstat64

1 0

[tor/release-0.2.9] Merge branch 'maint-0.2.9' into release-0.2.9
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 78988f151d7706632a4b1e453667e35cc85c4b39 Merge: 486ac94 1c64133 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 13:52:19 2017 -0400 Merge branch 'maint-0.2.9' into release-0.2.9 changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+)

1 0

[tor/maint-0.3.0] Merge branch 'maint-0.2.9' into maint-0.3.0
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 71c701927a27723f0bc9009a044a4bdece55f361 Merge: 493d9cd 1c64133 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 13:52:19 2017 -0400 Merge branch 'maint-0.2.9' into maint-0.3.0 changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+)

1 0

[tor/master] Merge branch 'maint-0.2.9' into maint-0.3.0
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 71c701927a27723f0bc9009a044a4bdece55f361 Merge: 493d9cd 1c64133 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 13:52:19 2017 -0400 Merge branch 'maint-0.2.9' into maint-0.3.0 changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+)

1 0

[tor/release-0.3.1] Merge branch 'maint-0.2.9' into maint-0.3.0
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 71c701927a27723f0bc9009a044a4bdece55f361 Merge: 493d9cd 1c64133 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 13:52:19 2017 -0400 Merge branch 'maint-0.2.9' into maint-0.3.0 changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+)

1 0

[tor/release-0.3.1] Permit the fchmod system call.
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 59f29970fa78bec8c01bd5f16edca8c24b8724f5 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jun 16 14:03:02 2017 -0400 Permit the fchmod system call. Fixes bug 22516; bugfix on 0.2.5.4-alpha. --- changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+) diff --git a/changes/bug22516 b/changes/bug22516 new file mode 100644 index 0000000..f024a3c --- /dev/null +++ b/changes/bug22516 @@ -0,0 +1,5 @@ + o Minor bugfixes (linux seccomp2 sandbox): + - Permit the fchmod system call, to avoid crashing on startup when + starting with the seccomp2 sandbox and an unexpected set of permissions + on the data directory or its contents. Fixes bug 22516; bugfix on + 0.2.5.4-alpha. diff --git a/src/common/sandbox.c b/src/common/sandbox.c index 95c9f83..da96ad8 100644 --- a/src/common/sandbox.c +++ b/src/common/sandbox.c @@ -136,6 +136,9 @@ static int filter_nopar_gen[] = { #ifdef HAVE_PIPE SCMP_SYS(pipe), #endif +#ifdef __NR_fchmod + SCMP_SYS(fchmod), +#endif SCMP_SYS(fcntl), SCMP_SYS(fstat), #ifdef __NR_fstat64

1 0

[tor/release-0.3.0] Merge branch 'maint-0.2.9' into maint-0.3.0
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 71c701927a27723f0bc9009a044a4bdece55f361 Merge: 493d9cd 1c64133 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 13:52:19 2017 -0400 Merge branch 'maint-0.2.9' into maint-0.3.0 changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+)

1 0

[tor/release-0.3.0] Merge branch 'maint-0.3.0' into release-0.3.0
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 1bf534c8b37d0f1608395e9362384afb1f4f7187 Merge: b4ae31e 71c7019 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 13:52:19 2017 -0400 Merge branch 'maint-0.3.0' into release-0.3.0 changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+)

1 0

[tor/release-0.3.1] Merge remote-tracking branch 'public/bug22516_029' into maint-0.2.9
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit 1c64133cb3b9656fc37c1d8c91e1b4225f889428 Merge: cd7d006 59f2997 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 13:50:49 2017 -0400 Merge remote-tracking branch 'public/bug22516_029' into maint-0.2.9 changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+)

1 0

[tor/release-0.3.1] Merge branch 'maint-0.3.0' into maint-0.3.1
by nickm＠torproject.org 19 Jun '17

19 Jun '17

commit eff5e29404980a87b4618e8623c35a363af6cc04 Merge: 5641e27 71c7019 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Jun 19 13:52:19 2017 -0400 Merge branch 'maint-0.3.0' into maint-0.3.1 changes/bug22516 | 5 +++++ src/common/sandbox.c | 3 +++ 2 files changed, 8 insertions(+)

1 0