6 Commits

Author	SHA1	Message	Date
Petr Lautrbach	ecfcb1d6a8	sandbox: Use temporary directory for XDG_RUNTIME_DIR ... XDG_RUNTIME_DIR (/run/user/$UID) is used for user-specific data files such as sockets, named pipes and so on. Therefore, it should not be available to sandboxed processes. Usage: # ls -a $XDG_RUNTIME_DIR . .. bus pipewire-0 systemd # sandbox -R /root/sandbox/user -- sh -c "ls -a $XDG_RUNTIME_DIR" . .. Signed-off-by: Petr Lautrbach <plautrba@redhat.com> Acked-by: James Carter <jwcart2@gmail.com>	2022-11-09 07:49:34 -05:00
Petr Lautrbach	0fb988c86b	sandbox: Do not try to remove tmpdir twice if uid == 0 ... If the user is root, tmpdir is already wiped out. Fixes: # sandbox -T /root/tmp -- id uid=0(root) gid=0(root) groups=0(root) context=unconfined_u:unconfined_r:sandbox_t:s0:c696,c756 Failed to remove directory /tmp/.sandbox-root-KIlB59: No such file or directory Signed-off-by: Petr Lautrbach <plautrba@redhat.com> Acked-by: James Carter <jwcart2@gmail.com>	2022-11-09 07:48:48 -05:00
Christian Göttsche	55c30addf6	sandbox: mark local functions static ... seunshare.c:92:6: warning: no previous prototype for ‘handler’ [-Wmissing-prototypes] 92 | void handler(int sig) { | ^~~~~~~ Signed-off-by: Christian Göttsche <cgzones@googlemail.com>	2021-11-15 16:00:54 -05:00
Christian Göttsche	92e7494f42	tree-wide: replace last occurrences of security_context_t ... Follow-up of: 9eb9c93275 ("Get rid of security_context_t and fix const declarations.") Acked-by: William Roberts <william.c.roberts@intel.com> Signed-off-by: Christian Göttsche <cgzones@googlemail.com>	2020-03-25 09:54:21 -05:00
Nicolas Iooss	b550c0e202	Fix many misspellings ... Use codespell (https://github.com/codespell-project/codespell) in order to find many common misspellings that are present in English texts. Signed-off-by: Nicolas Iooss <nicolas.iooss@m4x.org>	2019-09-18 22:47:35 +02:00
Stephen Smalley	97bf196c89	Move policycoreutils/sandbox to sandbox. ... Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>	2016-11-16 11:19:50 -05:00