January 2020 - tor-commits - lists.torproject.org

[tor/maint-0.4.1] Merge branch 'maint-0.3.5' into maint-0.4.0
by teor＠torproject.org 29 Jan '20

29 Jan '20

commit 65825018c7aed931324dd427bb1e84544a9b2f47 Merge: 026f068bb 41d52e9cd Author: teor <teor(a)torproject.org> Date: Thu Jan 30 07:54:58 2020 +1000 Merge branch 'maint-0.3.5' into maint-0.4.0 changes/bug29819 | 8 ++++++++ src/lib/sandbox/sandbox.c | 40 ++-------------------------------------- 2 files changed, 10 insertions(+), 38 deletions(-)

1 0

[tor/maint-0.4.1] Merge branch 'maint-0.4.0' into maint-0.4.1
by teor＠torproject.org 29 Jan '20

29 Jan '20

commit 6b392c333a854bb4d18ae6ea1686627451bb03f8 Merge: 9b0b2aef8 65825018c Author: teor <teor(a)torproject.org> Date: Thu Jan 30 07:55:05 2020 +1000 Merge branch 'maint-0.4.0' into maint-0.4.1 changes/bug29819 | 8 ++++++++ src/lib/sandbox/sandbox.c | 40 ++-------------------------------------- 2 files changed, 10 insertions(+), 38 deletions(-)

1 0

[tor/maint-0.4.0] Correct how we use libseccomp
by teor＠torproject.org 29 Jan '20

29 Jan '20

commit 0d64bafcfedd259fb15b3ee85a7b00a840aec73b Author: Peter Gerber <peter(a)arbitrary.ch> Date: Mon Jun 10 14:56:31 2019 +0200 Correct how we use libseccomp This fixes a startup crash with libseccomp v2.4.0 if Sandbox is set to 1. --- changes/bug29819 | 8 ++++++++ src/lib/sandbox/sandbox.c | 40 ++-------------------------------------- 2 files changed, 10 insertions(+), 38 deletions(-) diff --git a/changes/bug29819 b/changes/bug29819 new file mode 100644 index 000000000..d37ac83d6 --- /dev/null +++ b/changes/bug29819 @@ -0,0 +1,8 @@ + o Minor bugfixes (linux seccomp sandbox): + - Correct how we use libseccomp. Particularly, stop assuming that + rules are applied in a particular order or that more rules are + processed after the first match. Neither is the case! In libseccomp + <2.4.0 this lead to some rules having no effect. Libseccomp 2.4.0 + changed how rules are generated leading to a different ordering + which in turn lead to a fatal crash during startup. Fixes bug + 29819; bugfix on 0.2.5.1-alpha. Patch by Peter Gerber. diff --git a/src/lib/sandbox/sandbox.c b/src/lib/sandbox/sandbox.c index e2356a172..8f577b066 100644 --- a/src/lib/sandbox/sandbox.c +++ b/src/lib/sandbox/sandbox.c @@ -491,24 +491,6 @@ sb_open(scmp_filter_ctx ctx, sandbox_cfg_t *filter) } } - rc = seccomp_rule_add_1(ctx, SCMP_ACT_ERRNO(EACCES), SCMP_SYS(open), - SCMP_CMP_MASKED(1, O_CLOEXEC|O_NONBLOCK|O_NOCTTY|O_NOFOLLOW, - O_RDONLY)); - if (rc != 0) { - log_err(LD_BUG,"(Sandbox) failed to add open syscall, received libseccomp " - "error %d", rc); - return rc; - } - - rc = seccomp_rule_add_1(ctx, SCMP_ACT_ERRNO(EACCES), SCMP_SYS(openat), - SCMP_CMP_MASKED(2, O_CLOEXEC|O_NONBLOCK|O_NOCTTY|O_NOFOLLOW, - O_RDONLY)); - if (rc != 0) { - log_err(LD_BUG,"(Sandbox) failed to add openat syscall, received " - "libseccomp error %d", rc); - return rc; - } - return 0; } @@ -562,23 +544,6 @@ sb_chown(scmp_filter_ctx ctx, sandbox_cfg_t *filter) return 0; } -static int -sb__sysctl(scmp_filter_ctx ctx, sandbox_cfg_t *filter) -{ - int rc; - (void) filter; - (void) ctx; - - rc = seccomp_rule_add_0(ctx, SCMP_ACT_ERRNO(EPERM), SCMP_SYS(_sysctl)); - if (rc != 0) { - log_err(LD_BUG,"(Sandbox) failed to add _sysctl syscall, " - "received libseccomp error %d", rc); - return rc; - } - - return 0; -} - /** * Function responsible for setting up the rename syscall for * the seccomp filter sandbox. @@ -1141,7 +1106,6 @@ static sandbox_filter_func_t filter_func[] = { sb_chmod, sb_open, sb_openat, - sb__sysctl, sb_rename, #ifdef __NR_fcntl64 sb_fcntl64, @@ -1518,14 +1482,14 @@ install_syscall_filter(sandbox_cfg_t* cfg) int rc = 0; scmp_filter_ctx ctx; - ctx = seccomp_init(SCMP_ACT_TRAP); + ctx = seccomp_init(SCMP_ACT_ERRNO(EPERM)); if (ctx == NULL) { log_err(LD_BUG,"(Sandbox) failed to initialise libseccomp context"); rc = -1; goto end; } - // protectign sandbox parameter strings + // protecting sandbox parameter strings if ((rc = prot_strings(ctx, cfg))) { goto end; }

1 0

[tor/maint-0.4.0] Merge remote-tracking branch 'tor-github/pr/1614' into maint-0.3.5
by teor＠torproject.org 29 Jan '20

29 Jan '20

commit 41d52e9cd80bfb318ec7f0969f3889d275012e37 Merge: 19954cffd 0d64bafcf Author: teor <teor(a)torproject.org> Date: Thu Jan 30 07:53:53 2020 +1000 Merge remote-tracking branch 'tor-github/pr/1614' into maint-0.3.5 changes/bug29819 | 8 ++++++++ src/lib/sandbox/sandbox.c | 40 ++-------------------------------------- 2 files changed, 10 insertions(+), 38 deletions(-)

1 0

[tor/maint-0.4.0] Merge branch 'maint-0.3.5' into maint-0.4.0
by teor＠torproject.org 29 Jan '20

29 Jan '20

commit 65825018c7aed931324dd427bb1e84544a9b2f47 Merge: 026f068bb 41d52e9cd Author: teor <teor(a)torproject.org> Date: Thu Jan 30 07:54:58 2020 +1000 Merge branch 'maint-0.3.5' into maint-0.4.0 changes/bug29819 | 8 ++++++++ src/lib/sandbox/sandbox.c | 40 ++-------------------------------------- 2 files changed, 10 insertions(+), 38 deletions(-)

1 0

[tor/maint-0.3.5] Merge remote-tracking branch 'tor-github/pr/1614' into maint-0.3.5
by teor＠torproject.org 29 Jan '20

29 Jan '20

commit 41d52e9cd80bfb318ec7f0969f3889d275012e37 Merge: 19954cffd 0d64bafcf Author: teor <teor(a)torproject.org> Date: Thu Jan 30 07:53:53 2020 +1000 Merge remote-tracking branch 'tor-github/pr/1614' into maint-0.3.5 changes/bug29819 | 8 ++++++++ src/lib/sandbox/sandbox.c | 40 ++-------------------------------------- 2 files changed, 10 insertions(+), 38 deletions(-)

1 0

[tor/maint-0.3.5] Correct how we use libseccomp
by teor＠torproject.org 29 Jan '20

29 Jan '20

commit 0d64bafcfedd259fb15b3ee85a7b00a840aec73b Author: Peter Gerber <peter(a)arbitrary.ch> Date: Mon Jun 10 14:56:31 2019 +0200 Correct how we use libseccomp This fixes a startup crash with libseccomp v2.4.0 if Sandbox is set to 1. --- changes/bug29819 | 8 ++++++++ src/lib/sandbox/sandbox.c | 40 ++-------------------------------------- 2 files changed, 10 insertions(+), 38 deletions(-) diff --git a/changes/bug29819 b/changes/bug29819 new file mode 100644 index 000000000..d37ac83d6 --- /dev/null +++ b/changes/bug29819 @@ -0,0 +1,8 @@ + o Minor bugfixes (linux seccomp sandbox): + - Correct how we use libseccomp. Particularly, stop assuming that + rules are applied in a particular order or that more rules are + processed after the first match. Neither is the case! In libseccomp + <2.4.0 this lead to some rules having no effect. Libseccomp 2.4.0 + changed how rules are generated leading to a different ordering + which in turn lead to a fatal crash during startup. Fixes bug + 29819; bugfix on 0.2.5.1-alpha. Patch by Peter Gerber. diff --git a/src/lib/sandbox/sandbox.c b/src/lib/sandbox/sandbox.c index e2356a172..8f577b066 100644 --- a/src/lib/sandbox/sandbox.c +++ b/src/lib/sandbox/sandbox.c @@ -491,24 +491,6 @@ sb_open(scmp_filter_ctx ctx, sandbox_cfg_t *filter) } } - rc = seccomp_rule_add_1(ctx, SCMP_ACT_ERRNO(EACCES), SCMP_SYS(open), - SCMP_CMP_MASKED(1, O_CLOEXEC|O_NONBLOCK|O_NOCTTY|O_NOFOLLOW, - O_RDONLY)); - if (rc != 0) { - log_err(LD_BUG,"(Sandbox) failed to add open syscall, received libseccomp " - "error %d", rc); - return rc; - } - - rc = seccomp_rule_add_1(ctx, SCMP_ACT_ERRNO(EACCES), SCMP_SYS(openat), - SCMP_CMP_MASKED(2, O_CLOEXEC|O_NONBLOCK|O_NOCTTY|O_NOFOLLOW, - O_RDONLY)); - if (rc != 0) { - log_err(LD_BUG,"(Sandbox) failed to add openat syscall, received " - "libseccomp error %d", rc); - return rc; - } - return 0; } @@ -562,23 +544,6 @@ sb_chown(scmp_filter_ctx ctx, sandbox_cfg_t *filter) return 0; } -static int -sb__sysctl(scmp_filter_ctx ctx, sandbox_cfg_t *filter) -{ - int rc; - (void) filter; - (void) ctx; - - rc = seccomp_rule_add_0(ctx, SCMP_ACT_ERRNO(EPERM), SCMP_SYS(_sysctl)); - if (rc != 0) { - log_err(LD_BUG,"(Sandbox) failed to add _sysctl syscall, " - "received libseccomp error %d", rc); - return rc; - } - - return 0; -} - /** * Function responsible for setting up the rename syscall for * the seccomp filter sandbox. @@ -1141,7 +1106,6 @@ static sandbox_filter_func_t filter_func[] = { sb_chmod, sb_open, sb_openat, - sb__sysctl, sb_rename, #ifdef __NR_fcntl64 sb_fcntl64, @@ -1518,14 +1482,14 @@ install_syscall_filter(sandbox_cfg_t* cfg) int rc = 0; scmp_filter_ctx ctx; - ctx = seccomp_init(SCMP_ACT_TRAP); + ctx = seccomp_init(SCMP_ACT_ERRNO(EPERM)); if (ctx == NULL) { log_err(LD_BUG,"(Sandbox) failed to initialise libseccomp context"); rc = -1; goto end; } - // protectign sandbox parameter strings + // protecting sandbox parameter strings if ((rc = prot_strings(ctx, cfg))) { goto end; }

1 0

[tor/master] Merge remote-tracking branch 'tor-github/pr/1634' into maint-0.4.1
by teor＠torproject.org 29 Jan '20

29 Jan '20

commit 9b0b2aef806c5d9bcb5e5acd4b4c3cf7488ec442 Merge: fb541ffca 54eec5342 Author: teor <teor(a)torproject.org> Date: Thu Jan 30 07:54:39 2020 +1000 Merge remote-tracking branch 'tor-github/pr/1634' into maint-0.4.1 changes/bug32778 | 3 +++ src/app/main/main.c | 4 ++-- src/app/main/main.h | 3 +++ src/app/main/ntmain.c | 7 +++++++ 4 files changed, 15 insertions(+), 2 deletions(-)

1 0

[tor/master] Merge remote-tracking branch 'tor-github/pr/1614' into maint-0.3.5
by teor＠torproject.org 29 Jan '20

29 Jan '20

commit 41d52e9cd80bfb318ec7f0969f3889d275012e37 Merge: 19954cffd 0d64bafcf Author: teor <teor(a)torproject.org> Date: Thu Jan 30 07:53:53 2020 +1000 Merge remote-tracking branch 'tor-github/pr/1614' into maint-0.3.5 changes/bug29819 | 8 ++++++++ src/lib/sandbox/sandbox.c | 40 ++-------------------------------------- 2 files changed, 10 insertions(+), 38 deletions(-)

1 0

[tor/master] Merge branch 'maint-0.4.0' into maint-0.4.1
by teor＠torproject.org 29 Jan '20

29 Jan '20

commit 6b392c333a854bb4d18ae6ea1686627451bb03f8 Merge: 9b0b2aef8 65825018c Author: teor <teor(a)torproject.org> Date: Thu Jan 30 07:55:05 2020 +1000 Merge branch 'maint-0.4.0' into maint-0.4.1 changes/bug29819 | 8 ++++++++ src/lib/sandbox/sandbox.c | 40 ++-------------------------------------- 2 files changed, 10 insertions(+), 38 deletions(-)

1 0