Header file for sandbox.c. More...

#include "orconfig.h"
#include "lib/cc/torint.h"

Macros
#define	SYS_SECCOMP 1

#define	sandbox_intern_string(s)

#define	sandbox_interned_string_is_missing(s)

Typedefs
typedef struct sandbox_cfg_elem_t	sandbox_cfg_t

Functions
sandbox_cfg_t *	sandbox_cfg_new (void)

int	sandbox_cfg_allow_open_filename (sandbox_cfg_t *cfg, char file)

int	sandbox_cfg_allow_chmod_filename (sandbox_cfg_t *cfg, char file)

int	sandbox_cfg_allow_chown_filename (sandbox_cfg_t *cfg, char file)

int	sandbox_cfg_allow_rename (sandbox_cfg_t *cfg, char file1, char *file2)

int	sandbox_cfg_allow_openat_filename (sandbox_cfg_t *cfg, char file)

int	sandbox_cfg_allow_opendir_dirname (sandbox_cfg_t *cfg, char dir)

int	sandbox_cfg_allow_stat_filename (sandbox_cfg_t *cfg, char file)

int	sandbox_init (sandbox_cfg_t *cfg)

int	sandbox_is_active (void)

Detailed Description

Header file for sandbox.c.

Definition in file sandbox.h.

Macro Definition Documentation

◆ sandbox_intern_string

#define sandbox_intern_string ( s )

Value:

(s)

Linux definitions

Definition at line 113 of file sandbox.h.

Referenced by check_private_dir(), configure_nameservers(), connection_listener_new(), crypto_strongest_rand_fallback(), file_status(), storage_dir_clean_tmpfiles(), storage_dir_get_usage(), storage_dir_remove_file(), storage_dir_shrink(), tor_fopen_cloexec(), tor_listdir(), tor_open_cloexec(), tor_rename(), and tor_run_main().

◆ sandbox_interned_string_is_missing

#define sandbox_interned_string_is_missing ( s )

Value:

(false)

Definition at line 114 of file sandbox.h.

◆ SYS_SECCOMP

#define SYS_SECCOMP 1

Used by SIGSYS signal handler to check if the signal was issued due to a seccomp2 filter violation.

Definition at line 27 of file sandbox.h.

Typedef Documentation

◆ sandbox_cfg_t

typedef struct sandbox_cfg_elem_t sandbox_cfg_t

Typedef to structure used to manage a sandbox configuration.

Definition at line 38 of file sandbox.h.

Function Documentation

◆ sandbox_cfg_allow_chmod_filename()

int sandbox_cfg_allow_chmod_filename	(	sandbox_cfg_t **	cfg,
		char *	file )

Definition at line 2357 of file sandbox.c.

◆ sandbox_cfg_allow_chown_filename()

int sandbox_cfg_allow_chown_filename	(	sandbox_cfg_t **	cfg,
		char *	file )

Definition at line 2350 of file sandbox.c.

◆ sandbox_cfg_allow_open_filename()

int sandbox_cfg_allow_open_filename	(	sandbox_cfg_t **	cfg,
		char *	file )

Function used to add a open allowed filename to a supplied configuration. The (char*) specifies the path to the allowed file; we take ownership of the pointer.

Definition at line 2322 of file sandbox.c.

Referenced by storage_dir_register_with_sandbox().

◆ sandbox_cfg_allow_openat_filename()

int sandbox_cfg_allow_openat_filename	(	sandbox_cfg_t **	cfg,
		char *	file )

Function used to add a openat allowed filename to a supplied configuration. The (char*) specifies the path to the allowed file; we steal the pointer to that file.

Definition at line 2329 of file sandbox.c.

◆ sandbox_cfg_allow_opendir_dirname()

int sandbox_cfg_allow_opendir_dirname	(	sandbox_cfg_t **	cfg,
		char *	dir )

Function used to add a opendir allowed filename to a supplied configuration. The (char*) specifies the path to the allowed dir; we steal the pointer to that dir.

Definition at line 2336 of file sandbox.c.

◆ sandbox_cfg_allow_rename()

int sandbox_cfg_allow_rename	(	sandbox_cfg_t **	cfg,
		char *	file1,
		char *	file2 )

Definition at line 2364 of file sandbox.c.

◆ sandbox_cfg_allow_stat_filename()

int sandbox_cfg_allow_stat_filename	(	sandbox_cfg_t **	cfg,
		char *	file )

Function used to add a stat/stat64 allowed filename to a configuration. The (char*) specifies the path to the allowed file; that pointer is stolen.

Definition at line 2343 of file sandbox.c.

Referenced by storage_dir_register_with_sandbox().

◆ sandbox_cfg_new()

sandbox_cfg_t * sandbox_cfg_new ( void )

Creates an empty sandbox configuration file.

Definition at line 2292 of file sandbox.c.

◆ sandbox_init()

int sandbox_init ( sandbox_cfg_t * cfg )

Function used to initialise a sandbox configuration.

Definition at line 2298 of file sandbox.c.

Referenced by tor_run_main().

◆ sandbox_is_active()

int sandbox_is_active ( void )

Return true iff the sandbox is turned on.

Definition at line 2371 of file sandbox.c.

Referenced by dump_desc(), options_act(), options_check_transition_cb(), options_start_listener_transaction(), and routerparse_init().

Macros

Typedefs

Functions