[patch] sandbox-1.2.1-dev-usage.patch

sandbox-1_2_1-dev-usage.patch (text/plain), 1.26 KB, created by Jason Stubbs (RETIRED) on 2005-04-28 02:09:54 UTC

diff -uNr sandbox-1.2.1.orig/libsandbox.c sandbox-1.2.1/libsandbox.c
--- sandbox-1.2.1.orig/libsandbox.c	2005-04-28 18:00:45.510000000 +0900
+++ sandbox-1.2.1/libsandbox.c	2005-04-28 18:01:54.940000000 +0900
@@ -620,13 +620,6 @@
 
 	canonicalize_int(pathname, canonic);
 
-	/* XXX: Hack to make sure sandboxed process cannot remove
-	 * a device node, bug #79836. */
-	if (0 == strncmp(canonic, "/dev/", 5)) {
-		errno = EACCES;
-		return result;
-	}
-
 	if FUNCTION_SANDBOX_SAFE
 		("unlink", canonic) {
 		check_dlsym(unlink);
diff -uNr sandbox-1.2.1.orig/sandbox.c sandbox-1.2.1/sandbox.c
--- sandbox-1.2.1.orig/sandbox.c	2005-04-28 18:00:45.530000000 +0900
+++ sandbox-1.2.1/sandbox.c	2005-04-28 18:01:40.100000000 +0900
@@ -300,7 +300,7 @@
 		/* these could go into make.globals later on */
 		snprintf(buf, sizeof(buf),
 			 "%s:%s/.gconfd/lock:%s/.bash_history:",
-			 "/dev/zero:/dev/fd/:/dev/null:/dev/pts/:"
+			 "/dev/zero:/dev/fd/:/dev/pts/:"
 			 "/dev/vc/:/dev/tty:/tmp/:"
 			 "/dev/shm/ngpt:/var/log/scrollkeeper.log:"
 			 "/usr/tmp/conftest:/usr/lib/conftest:"
@@ -342,6 +342,7 @@
 			 "/usr/lib/python2.4/:"
 			 "/usr/lib/python2.5/:"
 			 "/usr/lib/python3.0/:",
+			 "/dev/null:",
 			 home_dir);
 
 		buf[sizeof(buf) - 1] = '\0';