kristapsdz
2fcaae3bf5
Remove superfluous error messages and style(9).
2020-07-17 12:47:32 +00:00
kristapsdz
69f2c319b8
No more systrace.
2018-09-28 14:24:30 +00:00
kristapsdz
e5389dab78
Get rid of all allocation/free of sandbox resources, which was only used by
...
systrace.
2018-09-28 14:21:08 +00:00
kristapsdz
6746ead36f
Remove the argument to sandboxers, as that was only used by systrace.
2018-09-28 14:16:06 +00:00
kristapsdz
fc16574dee
Remove parent configuration of sandbox, as only systrace used it and our
...
systrace support is no more.
2018-09-28 14:08:07 +00:00
kristapsdz
49005ddbcb
Start process of removing systrace support.
2018-09-28 14:04:56 +00:00
kristapsdz
07c8a6b00b
More ifndef -> if.
2017-10-18 21:51:20 +00:00
kristapsdz
685abdeced
Full switch to oconfigure instead of current system, so remove all of the
...
test and compat files. These are now in tests.c and compats.c, and driven
by the configure script. Also remove the MD5 code, which is part of
compats.c. Lastly, move ifdefs to ifs, remove defined (same), and also
remove HAVE_CONFIG_H.
2017-10-18 21:36:59 +00:00
kristapsdz
14e76de92d
Spelling errors from https://github.com/kristapsdz/kcgi/pull/14 (no functional change) -- thanks!
2016-11-02 19:21:37 +00:00
kristapsdz
72514a316e
Push control choices into sandbox and fix FreeBSD's sandbox handling.
2016-03-16 04:20:33 +00:00
kristapsdz
ba950964f7
Replace tame(2) with pledge(2). From a patch by James Turner--thanks!
2015-11-12 19:58:10 +00:00
kristapsdz
08693743a8
Fix sandbox (accidentally broken).
2015-08-06 20:50:23 +00:00
kristapsdz
a91d09a191
More tame(2) work.
2015-08-06 20:37:37 +00:00
kristapsdz
d1e85116c6
Add initial tame(2) sandbox.
2015-08-06 20:11:09 +00:00
kristapsdz
b1da7a0fbd
Initial attempt at putting control socket into a sandbox.
2015-07-19 08:52:24 +00:00
kristapsdz
dde0ef8f82
Kick out "struct worker" for the FastCGI interface.
2015-07-17 15:35:15 +00:00
kristapsdz
930ecf054e
More seccomp filter work.
2015-07-07 10:36:02 +00:00
kristapsdz
7874154d68
Fix sandbox test.
2015-07-07 08:56:53 +00:00
kristapsdz
dff2441c1a
Emit a warning if we're compiling without a sandbox.
2015-07-07 08:37:28 +00:00
kristapsdz
1c95299972
Linux workarounds.
2015-04-02 11:53:18 +00:00
kristapsdz
5e41927baf
Compile on OpenBSD.
2015-03-01 23:06:44 +00:00
kristapsdz
62355684ae
Abstract worker interface (parsing workers) into worker.c.
...
Shuffle around some logic to have it be contained therein.
Add QUERY_STRING parsing in the test harness and a test that takes
advantage of it.
2014-12-19 13:30:08 +00:00
kristapsdz
5d68596028
Make sandbox exit also have its error code propogated.
2014-12-03 21:08:27 +00:00
kristapsdz
f55b9f6903
Capsicum support contributed by Baptiste Daroussin. Thanks!
2014-11-21 16:38:53 +00:00
kristapsdz
8466abeb2e
Add JSON types.
2014-08-31 19:59:25 +00:00
kristapsdz
f3a1007866
Add some more standard MIME types and better name the kmime enum.
...
Add some experimental (unused) stuff in sandbox.c.
Remove "struct req" argument from the kvalidator.
2014-07-02 08:51:59 +00:00
kristapsdz
cac2b2a505
Split out sandbox code.
2014-05-24 13:02:15 +00:00
kristapsdz
3ad2b7fd5f
Clean-up of sandboxing.
2014-05-23 20:48:50 +00:00
kristapsdz
f0f627448b
Fix for compilation on Linux.
2014-05-23 20:47:08 +00:00
kristapsdz
6c46c41cd4
Properly working on OpenBSD.
2014-05-23 20:31:53 +00:00
kristapsdz
2879027018
Wrappers for reporting errors and warnings.
2014-05-23 14:49:48 +00:00
kristapsdz
f0062aa777
Compile on OpenBSD.
2014-05-22 21:34:51 +00:00
kristapsdz
0a678b0006
Better error checking and logging.
2014-05-22 14:28:47 +00:00
kristapsdz
c41758bebf
More preparation of systrace protection.
2014-05-14 20:43:25 +00:00
kristapsdz
2deb4cd77f
Getting ready for systrace jail.
2014-05-14 19:53:53 +00:00
kristapsdz
f0932bbb84
Compilation support on Linux.
2014-05-14 09:50:17 +00:00
kristapsdz
157ebd6b7b
Documentation. Get ready for version.
2014-05-12 16:25:45 +00:00
kristapsdz
01404f971e
Remove RLIMIT_NOFILE.
...
It's causing too many problems.
(Re-use for non-Darwin?)
2014-05-12 16:11:24 +00:00
kristapsdz
0cdc4a5b9b
Integrate sandbox model.
2014-05-12 15:43:26 +00:00
kristapsdz