Commit Graph

Select branches

Hide Pull Requests

main

#1

#100

#101

#103

#105

#106

#107

#108

#11

#110

#111

#112

#113

#114

#115

#116

#117

#119

#12

#120

#121

#123

#124

#125

#127

#13

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#143

#144

#146

#147

#148

#149

#15

#150

#151

#156

#157

#160

#161

#162

#17

#171

#172

#2

#21

#22

#24

#26

#3

#30

#33

#34

#36

#37

#38

#39

#4

#40

#44

#45

#46

#48

#49

#5

#50

#51

#52

#53

#54

#55

#56

#57

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#67

#68

#69

#75

#78

#8

#80

#81

#82

#83

#84

#85

#87

#91

#92

#93

#95

#96

#98

#99

latest

v20190318

v20190823

Mono Color

• 3990ff23f4 Automated Code Change main Oliver Kunz 2024-03-11 01:14:04 -0700
• d33fe262b9 We have deprecated sapi:✌️:NullPtr earlier this year. Users of SAPI can now pass directly a nullptr to the sandboxed API function. We believe that this will reduce development efforts and improve readability. Oliver Kunz 2024-03-11 01:13:16 -0700
• 64ed644f73 Include-what-you-use fix Christian Blichmann 2024-03-07 06:47:38 -0800
• c6bab97690 Added more descriptive Syscall argument types, and an API for introspecting arguments. Sandboxed API Team 2024-03-05 11:06:15 -0800
• 1f390c279e Adding API for getting the current PolicyBuilder status. Sandboxed API Team 2024-03-05 10:35:10 -0800
• c8a26fbfa0 Replace usages of deprecated sapi:✌️:NullPtr Wiktor Garbacz 2024-02-29 07:24:30 -0800
• 86e356b7ee Add Sandbox::AllocateAndTransferToSandboxee utility function. Oliver Kunz 2024-02-28 10:38:26 -0800
• 180aa03603 Internal change Kevin Hamacher 2024-02-28 07:36:18 -0800
• e7c5de0db8 Fix sapi:✌️:Proto<T>::FromMessage Wiktor Garbacz 2024-02-28 06:00:44 -0800
• f7f4cdb458 More complete error handling in SerializeProto Wiktor Garbacz 2024-02-28 05:46:27 -0800
• 2430bc8ae8 Use sandboxed libunwind also with sanitizers Wiktor Garbacz 2024-02-27 04:35:44 -0800
• 2cacad6008 var_abstract: Use the string representation of Type. Oliver Kunz 2024-02-21 05:11:15 -0800
• 008b45c9b7 PolicyBuilder: ignore duplicate calls to more complex helpers Wiktor Garbacz 2024-02-19 06:13:03 -0800
• 34f129dc51 Comms: Always use the inline buffer Wiktor Garbacz 2024-02-14 07:12:01 -0800
• 4f93af65e6 Improve documentation of TransferToSandboxee() and TransferFromSandboxee(). Oliver Kunz 2024-02-12 04:20:52 -0800
• 597b4430ba GitHub workflows: Combine SAPI generator build and "prerelease" Christian Blichmann 2024-02-06 07:47:29 -0800
• 229651db0f Test Generator Workflow Christian Blichmann 2024-02-06 14:03:57 +0100
• 49a0e5be04 Test Generator workflow Christian Blichmann 2024-02-06 11:06:03 +0100
• f708270f35 Add DefaultAction(TraceAllSyscalls) variant to PolicyBuilder latest A. Cody Schuffelen 2024-02-02 13:00:50 -0800
• 044ba1cb90 Return ENOSYS instead of hard denying clone3 Wiktor Garbacz 2024-02-01 04:38:24 -0800
• 29a3b8cd39 Add AllowAccess to SAPI's default policy Wiktor Garbacz 2024-02-01 02:51:09 -0800
• b9c84a1f75 Allow restartable sequences access to poll. Chris Kennelly 2024-01-30 23:47:46 -0800
• 0e98cceb32 Permit TCMalloc to use MAP_FIXED_NOREPLACE. Chris Kennelly 2024-01-29 23:13:24 -0800
• f2840b37a3 NullPtr: Change SAPI to accept regular nullptr for sandboxed API calls. Oliver Kunz 2024-01-29 03:22:32 -0800
• fa5360351b Use absl::string_view consistently Wiktor Garbacz 2024-01-21 23:42:05 -0800
• 25cfb5ef03 Adding missing syscalls to the syscall tables. Sandboxed API Team 2024-01-19 16:45:34 -0800
• 824d894822 Make sandbox2::SyscallTable::GetEntry public and add new helper GetEntries. Sandboxed API Team 2024-01-19 16:27:34 -0800
• 28b45670c2 Allow sched_getaffinity in AllowLlvmSanitizers Wiktor Garbacz 2024-01-16 05:18:20 -0800
• fbfc2b9eac Handle prlimit64 in Allow*RLimit Wiktor Garbacz 2024-01-16 03:59:28 -0800
• 9a06f3ac0c Change the order of including system include paths. Sandboxed API Team 2024-01-08 11:38:26 -0800
• a56660f542 Allow restartable sequences' mmaps to name their VMAs. Chris Kennelly 2024-01-08 07:56:48 -0800
• fc610b7c7a Fix UB caused by uninitialized value. Sandboxed API Team 2024-01-03 01:48:04 -0800
• 1339d0b7f2 Remove unneeded include Wiktor Garbacz 2023-12-29 01:29:46 -0800
• 52babc15d4 logserver: Support non-UTF8 log messages Wiktor Garbacz 2023-12-28 06:34:29 -0800
• e5370e93ca Minor cleanups, no functional change. Sandboxed API Team 2023-12-27 13:39:18 -0800
• 36e4b80f9a Introduce and prefer AllowMmapWithoutExec Wiktor Garbacz 2023-12-27 02:50:16 -0800
• 1255f57108 Provide an option to use the unotify monitor instead of the ptrace monitor. Oliver Kunz 2023-12-14 00:47:34 -0800
• 0a992b683f Add special handling for global forkserver Wiktor Garbacz 2023-12-13 03:33:36 -0800
• d95df64ebb Add a test for custom forkserver Wiktor Garbacz 2023-12-12 06:52:38 -0800
• 39e49549e6 The current implementation of Sandbox::Terminate results in timeout's being reported to coroner in cases where a Restart or Terminate with graceful exit is requested. Oliver Kunz 2023-12-08 07:47:19 -0800
• 19d8f4729a Add clone3 to syscall defs Wiktor Garbacz 2023-12-07 00:45:41 -0800
• 4d34bdb145 Integrate LLVM at llvm/llvm-project@3287ae8f65 Dmitri Gribenko 2023-11-29 10:13:12 -0800
• 5ed720eeb1 SAPI_RAW_CHECK expects NUL-terminated strings Wiktor Garbacz 2023-11-29 01:02:56 -0800
• a0ba1c520f Enable the ability to change the sandboxee's malloc implementation. The default is set to "@bazel_tools//tools/cpp:malloc", which is also the default for Bazel's cc_binary [1]. Oliver Kunz 2023-11-16 10:00:29 -0800
• 9a171c7e5f Fix quoting for fedora build action Wiktor Garbacz 2023-11-14 07:20:32 -0800
• dc8bcc9d48 Update github actions OS and dependencies versions Wiktor Garbacz 2023-11-14 05:27:42 -0800
• 15fb5b9608 Allow sigaltstack Wiktor Garbacz 2023-11-13 04:21:53 -0800
• bc3c0ec17a Internal change Wiktor Garbacz 2023-11-10 07:26:28 -0800
• 1bad376e42 Block sigaltstack with ENOSYS by default Wiktor Garbacz 2023-11-09 06:31:38 -0800
• 6f90a6ef2a don't drop CAP_SYS_PTRACE as it is apparently needed by sandbox running as root when combined with apparmor (or possibly yama) LSM Sandboxed API Team 2023-11-02 00:41:55 -0700
• 79ab44c981 drop almost all capabilities during sandbox creation Sandboxed API Team 2023-10-31 01:31:00 -0700
• 4630346fd1 Fix unaligned load Wiktor Garbacz 2023-10-27 00:34:21 -0700
• 0940a9ee4a Export config.h from syscall.h for sapi::cpu::Architecture Wiktor Garbacz 2023-09-29 02:32:09 -0700
• 37a7432178 Remove deprecated comms functions Wiktor Garbacz 2023-09-26 05:44:21 -0700
• fadfa79d7a Add missing return Wiktor Garbacz 2023-09-24 23:46:23 -0700
• ee7b76f592 Automated rollback of commit 4ae281b6a2. Sandboxed API Team 2023-09-21 06:17:00 -0700
• 4ae281b6a2 Remove deprecated comms functions Wiktor Garbacz 2023-09-21 02:30:34 -0700
• 9a985f91a7 Replace use of deprecated sandbox2::Comms functions Wiktor Garbacz 2023-09-19 23:54:18 -0700
• 227daf4a42 Do 1 level of recursion on libunwind crashes Wiktor Garbacz 2023-09-19 06:49:17 -0700
• 1cf45be7df Refactor Comms to split out listening/connecting part Wiktor Garbacz 2023-09-19 05:13:40 -0700
• d26262d82e Remove stale comment Wiktor Garbacz 2023-09-19 02:04:07 -0700
• 37b3a51ca6 Use empty instead of length Sandboxed API Team 2023-09-18 00:46:15 -0700
• f5830c93cd Ensure that TCMalloc can execute NumCPUs. Chris Kennelly 2023-09-15 08:20:33 -0700
• 700f8fa547 Skip sanitizers for limits_test Wiktor Garbacz 2023-09-15 04:56:38 -0700
• 1475458939 namespace_test: use lstat instead of stat, don't descent into procfs & sysfs Wiktor Garbacz 2023-09-14 02:08:31 -0700
• b47a5ead07 Add TCMalloc related files to test policy Wiktor Garbacz 2023-09-13 09:05:53 -0700
• 4289b64aa7 Disallow clone3, unsafe clone and unshare flags Wiktor Garbacz 2023-09-12 06:29:54 -0700
• 77f62ccb1f Remove unused NetworkProxyClient::ConnectHandler Wiktor Garbacz 2023-09-08 07:50:09 -0700
• f614862e07 Remove deprecated VecStringToCharPtrArr Wiktor Garbacz 2023-09-07 03:08:44 -0700
• b350a41a10 Gather more coverage data Wiktor Garbacz 2023-09-07 02:42:26 -0700
• f6ec787902 PtraceMonitor: Add a hard deadline for waiting for kill to take effect Wiktor Garbacz 2023-09-06 04:28:43 -0700
• 98d7f91b4d Run more tests with sanitizers and coverage Wiktor Garbacz 2023-09-05 07:13:08 -0700
• 92aeadddee PolicyBuilder: test error conditions for AddPolicyOnSyscalls Wiktor Garbacz 2023-09-05 07:13:06 -0700
• 02d770adcc NetworkProxyTest: test more error conditions Wiktor Garbacz 2023-09-05 02:16:47 -0700
• b088c01ab2 Add missing Aarch64 syscall entries Wiktor Garbacz 2023-09-05 02:02:46 -0700
• 5f9698612e Better network proxy tests Wiktor Garbacz 2023-09-05 00:56:21 -0700
• 3ea315858d Remove mutexes from Comms Wiktor Garbacz 2023-09-04 07:00:19 -0700
• 197f03aa5b Adjust code so that variable name is correct Wiktor Garbacz 2023-09-04 03:12:46 -0700
• e23acfd7e7 Made slight optimizations in Sandbox2's comms. Jaeden Quintana 2023-08-31 13:49:41 -0700
• 2c9ac02b68 Rework network_proxy related tests/examples Wiktor Garbacz 2023-08-31 06:05:17 -0700
• a0eb8d4445 Increase limits in ElfParser Sandboxed API Team 2023-08-31 05:00:56 -0700
• dc25251af9 Enable sandboxed stack traces for coverage Wiktor Garbacz 2023-08-31 04:05:12 -0700
• f715bd8ba9 Run more tests with coverage enabled Wiktor Garbacz 2023-08-31 00:43:30 -0700
• 47c868e6b1 Merge block bpf/ptrace tests Wiktor Garbacz 2023-08-30 07:46:35 -0700
• 5802d5b681 Refactor Forkserver::LaunchChild Wiktor Garbacz 2023-08-30 07:11:49 -0700
• 09a48bac06 Reduce CHECK-failures in unotify monitor Wiktor Garbacz 2023-08-30 02:55:35 -0700
• 4a6b0d4633 Always override forkservers comms_fd in sandboxee Wiktor Garbacz 2023-08-30 02:20:25 -0700
• 0150026d38 Make PolicyBuilder helpers more self-contained Wiktor Garbacz 2023-08-29 08:11:31 -0700
• 37f00991b9 Final round of IWYU fixes for Sandbox2 Wiktor Garbacz 2023-08-25 06:49:42 -0700
• c04ef4572c CMake: Re-add missing library deps due to bad merge Christian Blichmann 2023-08-25 01:48:53 -0700
• 7de1c4d8d0 More IWYU annotations Wiktor Garbacz 2023-08-25 00:34:12 -0700
• c175ac2c20 Fix missing dep for users of SANDBOX2_TRACE Wiktor Garbacz 2023-08-25 00:33:34 -0700
• edde724ab9 Internal change Wiktor Garbacz 2023-08-24 23:54:54 -0700
• 8254d13faf Reenable the stack_trace_test Wiktor Garbacz 2023-08-24 09:11:12 -0700
• d5ff466c59 Support passing stderrthreshold to sandboxee Christian Blichmann 2023-08-24 08:57:49 -0700
• 3adc232a07 Add missing dependencies bazel/BUILD Wiktor Garbacz 2023-08-24 07:08:37 -0700
• 127176d72f Bulk IWYU and build_cleaner fixes Wiktor Garbacz 2023-08-24 06:23:03 -0700
• 38e5be910e Temporarily disable a non-sandboxed crash stack_trace_test Wiktor Garbacz 2023-08-24 05:59:17 -0700
• eaf8ef88c4 Sandboxed API: Env vars: Set GOOGLE_STDERRTHRESHOLD used by OSS Abseil Christian Blichmann 2023-08-24 04:49:40 -0700
• 0036d9d09f Update Abseil Wiktor Garbacz 2023-08-24 01:58:26 -0700