[gentoo-commits] proj/sandbox:master commit in: /

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     4e7dd0fa8256ecdb32a6ffed688f8b46c2a1dccc
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sun Sep 27 06:28:57 2015 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sun Sep 27 06:28:57 2015 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=4e7dd0fa

build: bump min autoconf/automake requirements

No real reason to do this other than making sure people are all
testing with the same baseline-ish versions.

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/configure.ac b/configure.ac
index 2e1bc9d..081398c 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,6 +1,6 @@
-AC_PREREQ([2.61])
+AC_PREREQ([2.69])
 AC_INIT([sandbox], [2.10], [sandbox@gentoo.org])
-AM_INIT_AUTOMAKE([1.12 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
+AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])
 AC_CONFIG_MACRO_DIR([m4])

[gentoo-commits] proj/sandbox:master commit in: /

[Sam James]

commit:     673825e437dfeb4ea6e86a4e8b0129fd044c9aec
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Sat May  4 12:03:31 2024 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Sat May  4 12:03:31 2024 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=673825e4

autogen.sh: sys-devel/autoconf-archive -> dev-build/autoconf-archive

Signed-off-by: Sam James <sam <AT> gentoo.org>

 autogen.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/autogen.sh b/autogen.sh
index 432152b..2223e51 100755
--- a/autogen.sh
+++ b/autogen.sh
@@ -7,7 +7,7 @@ touch ChangeLog
 # whatever updated version is on the host
 rm -f m4/*.m4
 
-# not everyone has sys-devel/autoconf-archive installed
+# not everyone has dev-build/autoconf-archive installed
 has() { [[ " ${*:2} " == *" $1 "* ]] ; }
 import_ax() {
 	local macro content m4 found lm4s=()

[gentoo-commits] proj/sandbox:master commit in: /

[Sam James]

commit:     62ce93feaa51f9e3a490ef522e0bad91f666ebe1
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Fri Jul 21 15:05:56 2023 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Sat Aug  5 04:32:14 2023 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=62ce93fe

configure.ac: fix whitespace

Signed-off-by: Sam James <sam <AT> gentoo.org>

 configure.ac | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/configure.ac b/configure.ac
index bb4c52c..7d6fce4 100644
--- a/configure.ac
+++ b/configure.ac
@@ -332,7 +332,7 @@ if test x"$have_rtld_next" = xyes ; then
   AC_DEFINE([HAVE_RTLD_NEXT], [1], [Have RTLD_NEXT enabled libc])
 fi
 
-dnl we need to handle symbols differently based upon their version, 
+dnl we need to handle symbols differently based upon their version,
 dnl but we have to know which symbols the libc supports first
 AC_MSG_CHECKING([libc path])
 echo "int main(void) { return 0; }" > libctest.c
@@ -370,7 +370,7 @@ AC_DEFINE_UNQUOTED([LIBC_PATH], ["$LIBC_PATH"], [Full path to the libc])
 AC_MSG_RESULT([$LIBC_PATH])
 AC_SUBST([LIBC_PATH])
 
-dnl when intercepting libc calls, we have to know the name of the 
+dnl when intercepting libc calls, we have to know the name of the
 dnl libc to load and search with dl*() calls
 AC_MSG_CHECKING([libc version])
 dnl the sed script at the end here looks funny but it's ok ...

[gentoo-commits] proj/sandbox:master commit in: /

[Sam James]

commit:     4f42e1984227012797030839b5e757a6da147141
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Fri Jul 21 15:04:23 2023 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Sat Aug  5 04:32:14 2023 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=4f42e198

configure.ac: cleanup error messages

Signed-off-by: Sam James <sam <AT> gentoo.org>

 configure.ac | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/configure.ac b/configure.ac
index e5e9722..bb4c52c 100644
--- a/configure.ac
+++ b/configure.ac
@@ -294,18 +294,18 @@ if test x"$va_copy" != xva_copy ; then
   )
 fi
 
-dnl Verify people aren't doing stupid shit
+dnl Avoid footguns.
 if test x"$enable_static" != xno ; then
-  AC_MSG_ERROR([dont be a Kumba, building a libsandbox.a is stupid])
+  AC_MSG_ERROR([Building a static libsandbox.a is not supported])
 fi
 if test x"$enable_shared" != xyes ; then
-  AC_MSG_ERROR([dont be a Kumba, omitting a libsandbox.so is stupid])
+  AC_MSG_ERROR([Omitting a libsandbox.so is not supported])
 fi
 if echo " $CFLAGS " | $EGREP ' -static ' >/dev/null 2>&1; then
-  AC_MSG_ERROR([dont be a Kumba, using -static in CFLAGS is stupid])
+  AC_MSG_ERROR([Using -static in CFLAGS is not supported])
 fi
 if echo " $LDFLAGS " | $EGREP ' -static ' >/dev/null 2>&1; then
-  AC_MSG_ERROR([dont be a Kumba, using -static in LDFLAGS is stupid])
+  AC_MSG_ERROR([Using -static in LDFLAGS is not supported])
 fi
 
 dnl Some libc's like those on bsd have dlopen() in libc, and not libdl

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Gilbert]

commit:     3ccc775d6f98c1917408bc3a370cfd6d3d789d50
Author:     Mike Gilbert <floppym <AT> gentoo <DOT> org>
AuthorDate: Fri Jun 23 03:14:58 2023 +0000
Commit:     Mike Gilbert <floppym <AT> gentoo <DOT> org>
CommitDate: Fri Jun 23 15:47:36 2023 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=3ccc775d

configure: update libc grep expression

On Alpine, libc's SONAME is 'libc.musl-x86_64.so.1'.

Signed-off-by: Mike Gilbert <floppym <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index a2a0355..5746702 100644
--- a/configure.ac
+++ b/configure.ac
@@ -378,7 +378,7 @@ echo "int main(void) { return 0; }" > libctest.c
 $CC $CFLAGS $CPPFLAGS $LDFLAGS -o libctest libctest.c
 LIBC_VERSION=$(
 	$READELF -d libctest | \
-	$EGREP 'NEEDED.* \@<:@libc\.so' | \
+	$EGREP 'NEEDED.* \@<:@libc\..*so' | \
 	$AWK '{print $NF}' | [sed -e 's:\[::' -e 's:\]::']
 )
 rm -f libctest*

[gentoo-commits] proj/sandbox:master commit in: /

[Sam James]

commit:     190300def3160ca39bd8590d1bbc7305ae07cc5b
Author:     James Le Cuirot <chewi <AT> gentoo <DOT> org>
AuthorDate: Sat Jan 21 16:36:05 2023 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Thu Feb 16 22:59:03 2023 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=190300de

build: Fix libc path configure test for mold

bfd, gold, lld, and mold all support `-Wl,--trace`, which has cleaner
output than `-Wl,--verbose`. mold doesn't output anything with the
latter, so the test didn't support that until now. The only difference
between them now is that mold prefixes its output with `trace: ` whereas
the others do not.

I checked the Solaris linker, but that does not support `-Wl,--trace`.

Bug: https://bugs.gentoo.org/830463
Signed-off-by: James Le Cuirot <chewi <AT> gentoo.org>
Closes: https://github.com/gentoo/sandbox/pull/5
Signed-off-by: Sam James <sam <AT> gentoo.org>

 configure.ac | 15 +++++----------
 1 file changed, 5 insertions(+), 10 deletions(-)

diff --git a/configure.ac b/configure.ac
index 698051f..a2a0355 100644
--- a/configure.ac
+++ b/configure.ac
@@ -352,16 +352,11 @@ try_link() {
 	) 1>&AS_MESSAGE_LOG_FD
 }
 LIBC_PATH=$(AS_IF(
-	dnl GNU linker (bfd & gold) searching for
-	dnl (bfd)  "attempt to open /usr/lib/gcc/x86_64-pc-linux-gnu/8.3.0/../../../../lib64/libc.so succeeded"
-	dnl (gold) "/usr/lib/gcc/x86_64-pc-linux-gnu/8.3.0/../../../../x86_64-pc-linux-gnu/bin/ld: Attempt to open /lib64/libc.so.6 succeeded"
-	dnl if log does not contain "attempt" word then it's not a GNU linker
-	[try_link -Wl,--verbose && grep -q '[[Aa]]ttempt' libctest.log],
-		[$AWK '/[[Aa]]ttempt to open/ { if (($(NF-1) ~ /\/libc\.so/) && ($NF == "succeeded")) LIBC = $(NF-1); }; END {print LIBC}' libctest.log],
-	dnl LLVM lld searching for latest (successful) entry of
-	dnl     "ld.lld: /usr/lib/gcc/x86_64-pc-linux-gnu/8.3.0/../../../../lib64/libc.so"
-	dnl     "ld.lld: /lib64/libc.so.6"
-	[try_link -Wl,--verbose],
+	dnl GNU linkers (bfd, gold), LLVM lld, mold - searching for latest entry of:
+	dnl     "/usr/lib/gcc/x86_64-pc-linux-gnu/8.3.0/../../../../lib64/libc.so"
+	dnl     "/lib64/libc.so.6"
+	dnl Note that mold prefixes output with "trace: " whereas others do not.
+	[try_link -Wl,--trace],
 		[$EGREP -o '/[[^ ]]*/libc.so.*' libctest.log | tail -n1],
 	dnl Solaris linker
 	[try_link -Wl,-m],

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     93db41e8d06902f3a6b75003df5e81f83846e500
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sat Nov  6 00:21:47 2021 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sat Nov  6 00:21:47 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=93db41e8

build: drop support for ancient C library versions

We don't need to support glibc versions that predate Linux-2.6.

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 12 ------------
 localdecls.h | 13 ++-----------
 2 files changed, 2 insertions(+), 23 deletions(-)

diff --git a/configure.ac b/configure.ac
index c1aa576..a353e0a 100644
--- a/configure.ac
+++ b/configure.ac
@@ -307,18 +307,6 @@ dnl uClibc doesn't currently provide dlvsym() so lets
 dnl verify the toolchain supports it
 AC_CHECK_FUNCS([dlvsym])
 
-dnl when using libc5, (f)trucate's offset argument type is size_t with
-dnl libc5, but it's off_t with libc6 (glibc2).
-AC_MSG_CHECKING([truncate argument type])
-AC_EGREP_HEADER([truncate.*size_t], [unistd.h],
-	[dnl
-		AC_MSG_RESULT([size_t])
-		AC_DEFINE([TRUNCATE_T], [size_t], [truncate arg type])
-	],[dnl
-		AC_MSG_RESULT([off_t])
-		AC_DEFINE([TRUNCATE_T], [off_t], [truncate arg type])
-])
-
 dnl Check if libc provides RTLD_NEXT
 AC_MSG_CHECKING([for RTLD_NEXT])
 AC_TRY_COMPILE([

diff --git a/localdecls.h b/localdecls.h
index ecc5856..6b727ff 100644
--- a/localdecls.h
+++ b/localdecls.h
@@ -11,9 +11,8 @@
 /* take care of broken ld loading */
 #if defined(__GLIBC__) && !defined(__UCLIBC__)
 
-# if __GLIBC__ <= 2 && __GLIBC_MINOR__ <= 2
-#  define BROKEN_RTLD_NEXT
-#  define LIBC 5
+# if __GLIBC__ < 2 || (__GLIBC__ == 2 && __GLIBC_MINOR__ <= 2)
+#  error "glibc-2.3+ required"
 # endif
 
 # if !defined(BROKEN_RTLD_NEXT)
@@ -22,14 +21,6 @@
 #  endif
 # endif
 
-#else
-
-#if 0
-# if defined(__FreeBSD__)
-#  define BROKEN_RTLD_NEXT
-# endif
-#endif
-
 #endif
 
 #ifdef PATH_MAX

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     05aa21138340e1e47fdc1221fe28f91c56069efd
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sat Nov  6 01:00:57 2021 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sat Nov  6 01:00:57 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=05aa2113

build: require at least a C99 compiler

Realistically we aren't even testing with older than C11 compilers,
but one thing at a time.

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index a353e0a..56ca87f 100644
--- a/configure.ac
+++ b/configure.ac
@@ -20,7 +20,8 @@ env 1>&AS_MESSAGE_LOG_FD
 AC_MSG_RESULT([ok])
 
 dnl Check for compiler and features first.
-AC_PROG_CC
+AC_PROG_CC_C99
+AS_IF([test "$ac_cv_prog_cc_c99" = "no"], [AC_MSG_ERROR([A C99+ compiler is required])])
 AM_PROG_CC_C_O
 AC_ISC_POSIX
 AC_USE_SYSTEM_EXTENSIONS

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     7f201956cbe44bb0f9d7a2f4f051d9f2c6ded9ba
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Wed Nov  3 06:45:13 2021 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Wed Nov  3 06:45:13 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=7f201956

bump to sandbox-3.2

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 4b7b64e..c1aa576 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [3.1], [sandbox@gentoo.org])
+AC_INIT([sandbox], [3.2], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.15 dist-xz foreign no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     82adb3fc965b4e7d74340e3bd9e1e6a52318e60b
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Wed Nov  3 00:33:04 2021 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Wed Nov  3 00:34:07 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=82adb3fc

bump to sandbox-3.1

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 512f581..4b7b64e 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [3.0], [sandbox@gentoo.org])
+AC_INIT([sandbox], [3.1], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.15 dist-xz foreign no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     52f6d8422c7c34e3f5cb628b4bb6bcc4f7fd7d11
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Wed Nov  3 00:04:47 2021 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Wed Nov  3 00:04:47 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=52f6d842

bump to sandbox-3.0

Signal the significant changes that are happening around ptrace usage
by bumping the major version up.

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index dabb50e..512f581 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.29], [sandbox@gentoo.org])
+AC_INIT([sandbox], [3.0], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.15 dist-xz foreign no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     2ac026cd25dc3355d6b5cb33709ee0c9ca50b92c
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Thu Oct 28 07:37:44 2021 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Thu Oct 28 07:37:44 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=2ac026cd

bump to sandbox-2.29

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 254104d..dabb50e 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.28], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.29], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.15 dist-xz foreign no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     18ccd8bec26d740a0d48d2db44e33dee7678e8af
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sun Oct 24 04:15:54 2021 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sun Oct 24 04:15:54 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=18ccd8be

bump to configure-2.28

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index fef865f..fee0e4f 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.27], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.28], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.15 dist-xz foreign no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     36be21eb2eeb06fd9723798a72b51d2d517bed4f
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Fri Oct 22 17:48:45 2021 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Fri Oct 22 17:48:59 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=36be21eb

TODO: add more work!

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 TODO | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/TODO b/TODO
index c8d1109..6b3df5a 100644
--- a/TODO
+++ b/TODO
@@ -9,6 +9,26 @@ review erealpath vs realpath usage
 wrappers for execl{,l,p} ... unfortunately, we'll probably have to basically
 reimplement the functions (building up argv[] and then call the execv* ver)
 
+wrappers for open funcs:
+ - freopen
+ - freopen64
+ - name_to_handle_at
+ - open_by_handle_at
+ - __open
+ - __open64
+
+wrappers for 64-bit time funcs
+https://bugs.gentoo.org/751241
+
+wrappers for syscalls that modify non-filesystem resources ?
+how would we `addpredict` these ?
+is it worth checking for these in the first place ?  unittests sometimes do
+terrible things to systems.
+ - clock_settime
+ - create_module
+ - setdomainname
+ - settimeofday
+
 erealpath() might deref symlinks when working with unreadable paths as non-root
 even when working on funcs that do not deref funcs themselves ... this isnt a
 real big issue though

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     8c8e34eac4f10f9af47461ed0f754913409710bc
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Fri Oct 22 00:22:00 2021 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Fri Oct 22 02:47:38 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=8c8e34ea

bump to sandbox-2.27

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index b1fd45d..f68cf90 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.26], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.27], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.15 dist-xz foreign no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     2057c2399fd53ea816e7a0c3cebc90de1b460f6a
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Thu Oct 21 09:54:26 2021 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Thu Oct 21 09:54:26 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=2057c239

bump to sandbox-2.26

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 99c0d01..b1fd45d 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.25], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.26], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.15 dist-xz foreign no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     2aaa62734b618164a10ae836362d0a17e409a901
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Thu Oct 21 06:31:24 2021 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Thu Oct 21 06:31:24 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=2aaa6273

build: require automake-1.15

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index a47a3bc..dac7d9c 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,6 +1,6 @@
 AC_PREREQ([2.69])
 AC_INIT([sandbox], [2.25], [sandbox@gentoo.org])
-AM_INIT_AUTOMAKE([1.14 dist-xz foreign no-dist-gzip silent-rules subdir-objects -Wall])
+AM_INIT_AUTOMAKE([1.15 dist-xz foreign no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])
 AC_CONFIG_MACRO_DIR([m4])

[gentoo-commits] proj/sandbox:master commit in: /

[Michał Górny]

commit:     73f7b82134bf07d977731b8dcc4bb271e4b82a54
Author:     Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Thu Oct 21 06:09:18 2021 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Thu Oct 21 06:09:18 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=73f7b821

configure.ac: Mark as foreign to fix incompat. caused by README.md

The README file rename has broken compatibility with older versions
of autoconf.  Mark the package as foreign to fix that.

Signed-off-by: Michał Górny <mgorny <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 9f64a0e..a47a3bc 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,6 +1,6 @@
 AC_PREREQ([2.69])
 AC_INIT([sandbox], [2.25], [sandbox@gentoo.org])
-AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
+AM_INIT_AUTOMAKE([1.14 dist-xz foreign no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])
 AC_CONFIG_MACRO_DIR([m4])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     1373fd32ad44d58b1181924fa2d2fabcd6d31c24
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Mon Oct 18 05:36:00 2021 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Mon Oct 18 05:36:00 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=1373fd32

README: convert to markdown

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 README => README.md | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/README b/README.md
similarity index 95%
rename from README
rename to README.md
index e92b429..a79eaa3 100644
--- a/README
+++ b/README.md
@@ -1,6 +1,4 @@
----------
-  about
----------
+# Sandbox
 
 Sandbox is a library (and helper utility) to run programs in a "sandboxed"
 environment.  This is used as a QA measure to try and prevent applications from
@@ -14,9 +12,7 @@ config files on the fly.
 For people who are familiar with the Debian "fakeroot" project or the RPM based
 "InstallWatch", sandbox is in the same vein of projects.
 
-----------
-  method
-----------
+## Method
 
 The way sandbox works is that you prime a few environment variables (in order
 to control the sandbox's behavior) and then stick it into the LD_PRELOAD

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     e4d2550791a820305ba4d86eb511c4539860b918
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Mon Oct 18 05:54:19 2021 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Mon Oct 18 05:54:19 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=e4d25507

README: document requirements & limitations

Start outlining what each method requires so people can choose.

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 README.md | 54 ++++++++++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 52 insertions(+), 2 deletions(-)

diff --git a/README.md b/README.md
index a79eaa3..bf15128 100644
--- a/README.md
+++ b/README.md
@@ -23,5 +23,55 @@ access that is not permitted is logged and we return an error to the
 application.  Any access that is permitted is of course forwarded along to the
 real C library.
 
-In case of static ELF binary sandbox traces eecuted binary with ptrace() system
-call.
+Static ELFs and setuid/setgid programs are executed with
+[ptrace()](https://man7.org/linux/man-pages/man2/ptrace.2.html) instead.
+
+## Availability
+
+Sandbox supports multiple monitoring methods, but not all are available in all
+system configurations.
+
+### preload
+
+The in-process LD_PRELOAD method should be available on any reasonable ELF-based
+system as long as it uses dynamic linking.  Statically linked programs will run,
+but will not be monitored, nor will set*id programs (because the C library will
+clear LD_PRELOAD first).
+
+Multiple ABIs are supported (e.g. x86 32-bit & 64-bit).
+
+It has been tested & known to work with:
+* Architecture
+  * They all should work!
+* Operating system
+  * [Linux](https://kernel.org/) 2.4+
+* C library
+  * [GNU C library (glibc)](https://www.gnu.org/software/libc/) 2.2+
+  * [uClibc](https://uclibc.org/) 0.9.26+
+  * [musl](https://musl.libc.org/) 0.9.9+
+
+### ptrace
+
+The out-of-process ptrace method is available on Linux systems, works with
+dynamic & static linking, and supports set*id programs (by forcing them to run
+without any elevated privileges).
+
+Multiple personalities are supported (e.g. PowerPC 32-bit & 64-bit).
+
+NB: Does not work in userland emulators (e.g. QEMU) which do not provide ptrace
+emulation.
+
+It requires:
+* Architecture
+  * Alpha
+  * ARM (32-bit EABI)
+  * Blackfin
+  * HPPA/PA-RISC (32-bit)
+  * Itanium
+  * PowerPC (32-bit & 64-bit)
+  * s390 (32-bit & 64-bit)
+  * x86 (32-bit & 64-bit & x32)
+* Operating system
+  * [Linux](https://kernel.org/) 2.6.20+
+* C library
+  * They all should work!

[gentoo-commits] proj/sandbox:master commit in: /

[Michał Górny]

commit:     ee52689e9833ab99febaf5a478b70eef4e0099a5
Author:     Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Tue Sep  7 15:36:15 2021 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Tue Sep  7 15:36:15 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=ee52689e

Release 2.25

Signed-off-by: Michał Górny <mgorny <AT> gentoo.org>

 INSTALL      | 6 +++---
 configure.ac | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/INSTALL b/INSTALL
index 8865734..e82fd21 100644
--- a/INSTALL
+++ b/INSTALL
@@ -1,8 +1,8 @@
 Installation Instructions
 *************************
 
-   Copyright (C) 1994-1996, 1999-2002, 2004-2016 Free Software
-Foundation, Inc.
+   Copyright (C) 1994-1996, 1999-2002, 2004-2017, 2020-2021 Free
+Software Foundation, Inc.
 
    Copying and distribution of this file, with or without modification,
 are permitted in any medium without royalty provided the copyright
@@ -225,7 +225,7 @@ order to use an ANSI C compiler:
 
 and if that doesn't work, install pre-built binaries of GCC for HP-UX.
 
-   HP-UX 'make' updates targets which have the same time stamps as their
+   HP-UX 'make' updates targets which have the same timestamps as their
 prerequisites, which makes it generally unusable when shipped generated
 files such as 'configure' are involved.  Use GNU 'make' instead.
 

diff --git a/configure.ac b/configure.ac
index ac0311e..9f64a0e 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.24], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.25], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Sergei Trofimovich]

commit:     3400e936d9dac9a9998fa5e36583a6ef87acdee7
Author:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
AuthorDate: Tue May  4 22:00:19 2021 +0000
Commit:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
CommitDate: Tue May  4 22:00:19 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=3400e936

configure.ac: release 2.24

Signed-off-by: Sergei Trofimovich <slyfox <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 7bd342d..ac0311e 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.23], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.24], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Sergei Trofimovich]

commit:     2b304d8ee40c38023411a3ea184c29ad5a1f8070
Author:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
AuthorDate: Tue May  4 07:53:23 2021 +0000
Commit:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
CommitDate: Tue May  4 07:53:23 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=2b304d8e

Makefile.am: don't mangle final binary with sed

In bug #774861 pash found out that /bin/sh -> busybox produces
invalid `sandbox` binary. It happens because `busybox sed` does
not implement hex escape insertions, like:

    $ printf "a" | gnu-sed 's/a/\x00/' | hexdump -C
    00000000  00                                                |.|
    $ printf "a" | busybox sed 's/a/\x00/' | hexdump -C
    00000000  78 30 30                                          |x00|

The change exposes `__SANDBOX_TESTING` variable to external users.

Reported-by: pash
Bug: https://bugs.gentoo.org/774861
Signed-off-by: Sergei Trofimovich <slyfox <AT> gentoo.org>

 Makefile.am | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/Makefile.am b/Makefile.am
index 5541f67..b0ea65f 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -47,12 +47,3 @@ dist-hook:
 			touch "$(distdir)/ChangeLog" ; \
 		fi ; \
 	fi
-
-install-exec-hook:
-	set -e ; \
-	for f in $(bindir)/sandbox $(libdir)/libsandbox.so ; do \
-		sed -i.tmp \
-			's:__SANDBOX_TESTING:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00:' \
-			$(DESTDIR)$$f ; \
-		rm -f $(DESTDIR)$$f.tmp ; \
-	done

[gentoo-commits] proj/sandbox:master commit in: /

[Sergei Trofimovich]

commit:     aff8062f63e25d0041fb33e7f21368feaf3e859c
Author:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
AuthorDate: Sat Apr 10 17:38:50 2021 +0000
Commit:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
CommitDate: Sat Apr 10 17:38:50 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=aff8062f

configure.ac: release 2.23

Signed-off-by: Sergei Trofimovich <slyfox <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index be733ef..7bd342d 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.22], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.23], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Sergei Trofimovich]

commit:     ba3e03d46c86db74a4be7db2feaa988a1c585b34
Author:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
AuthorDate: Sat Mar 27 11:13:46 2021 +0000
Commit:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
CommitDate: Sat Mar 27 11:13:46 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=ba3e03d4

configure.ac: release 2.22

Signed-off-by: Sergei Trofimovich <slyfox <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index ff163c3..be733ef 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.21], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.22], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Sergei Trofimovich]

commit:     36f868cfff93be9260d76ba7cf9f5cf1d8193f46
Author:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
AuthorDate: Sat Mar 27 11:12:09 2021 +0000
Commit:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
CommitDate: Sat Mar 27 11:12:09 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=36f868cf

README: mention ptrace()

Signed-off-by: Sergei Trofimovich <slyfox <AT> gentoo.org>

 README | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/README b/README
index 1bbc6e6..e92b429 100644
--- a/README
+++ b/README
@@ -26,3 +26,6 @@ we'll check the arguments against the environment settings.  Based on that, any
 access that is not permitted is logged and we return an error to the
 application.  Any access that is permitted is of course forwarded along to the
 real C library.
+
+In case of static ELF binary sandbox traces eecuted binary with ptrace() system
+call.

[gentoo-commits] proj/sandbox:master commit in: /

[Michał Górny]

commit:     5b1ec8ef2e07931ac30fff5ea75d8532d84a6145
Author:     Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Thu Mar 11 08:22:39 2021 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Thu Mar 11 08:55:50 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=5b1ec8ef

Bump to 2.21

Signed-off-by: Michał Górny <mgorny <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index b3bc10d..ff163c3 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.20], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.21], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Sergei Trofimovich]

commit:     b087be7d9f90662e45f803a7d6a4fa8cbb2def5c
Author:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
AuthorDate: Tue Nov 17 07:51:27 2020 +0000
Commit:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
CommitDate: Thu Mar 11 08:02:57 2021 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=b087be7d

configure.ac: use tool-prefixed READELF

Reported-by: Alexey
Signed-off-by: Sergei Trofimovich <slyfox <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index c536100..d0f46e2 100644
--- a/configure.ac
+++ b/configure.ac
@@ -31,7 +31,7 @@ AC_PROG_INSTALL
 AC_PROG_MAKE_SET
 AC_PROG_AWK
 AC_PROG_EGREP
-AC_CHECK_PROGS([READELF], [readelf eu-readelf], [false])
+AC_CHECK_TOOLS([READELF], [readelf eu-readelf], [false])
 AM_MISSING_PROG([AUTOM4TE], [autom4te])
 
 LT_INIT([disable-static])

[gentoo-commits] proj/sandbox:master commit in: /

[Michał Górny]

commit:     9e90ca7ede19181a3d693f543519c6fa5ecc1431
Author:     Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Sun May 31 10:31:41 2020 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Sun May 31 10:31:41 2020 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=9e90ca7e

Bump to v2.20

Signed-off-by: Michał Górny <mgorny <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 5a1c1e1..c536100 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.19], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.20], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Michał Górny]

commit:     3feda84e2b5c1522776e2e023651fb87a98e6970
Author:     Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Fri Feb 28 06:40:43 2020 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Fri Feb 28 06:52:11 2020 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=3feda84e

Stop installing the icon and .desktop file

The menu entry for Sandbox is not very useful, so stop installing
it by default.  Leave the files in place in case somebody wanted them.

Bug: https://bugs.gentoo.org/710920
Signed-off-by: Michał Górny <mgorny <AT> gentoo.org>

 Makefile.am | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/Makefile.am b/Makefile.am
index 309a41e..5541f67 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -10,14 +10,10 @@ SUBDIRS = \
 
 confdir = $(sysconfdir)
 confddir = $(sysconfdir)/sandbox.d
-pixmapdir = $(datadir)/pixmaps
-desktopdir = $(datadir)/applications
 
 dist_conf_DATA = etc/sandbox.conf
 confd_DATA = etc/sandbox.d/00default
 dist_pkgdata_DATA  = data/sandbox.bashrc
-dist_pixmap_DATA = data/sandbox.svg
-dist_desktop_DATA = data/sandbox.desktop
 noinst_LTLIBRARIES =
 
 libsandbox: libsbutil
@@ -28,6 +24,8 @@ EXTRA_DIST = \
 	headers.h \
 	localdecls.h \
 	ChangeLog.0 \
+	data/sandbox.desktop \
+	data/sandbox.svg \
 	etc/sandbox.d/00default.in \
 	scripts/gen_symbol_version_map.awk \
 	scripts/gen_symbol_header.awk \

[gentoo-commits] proj/sandbox:master commit in: /

[Sergei Trofimovich]

commit:     3c6ed890530abc690147bec4bbb6643995ad71e8
Author:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
AuthorDate: Fri Jul 12 06:32:40 2019 +0000
Commit:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
CommitDate: Fri Jul 12 06:32:40 2019 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=3c6ed890

Bump version up to 2.18

Signed-off-by: Sergei Trofimovich <slyfox <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 95897d5..1460ebd 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.17], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.18], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Andreas K. Hüttel]

commit:     b61c0675825454286d925f5a360d225622f961dc
Author:     Andreas K. Hüttel <dilfridge <AT> gentoo <DOT> org>
AuthorDate: Wed Mar 13 10:00:34 2019 +0000
Commit:     Andreas K. Hüttel <dilfridge <AT> gentoo <DOT> org>
CommitDate: Wed Mar 13 10:00:34 2019 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=b61c0675

Bump to 2.17

Signed-off-by: Andreas K. Hüttel <dilfridge <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index ca59928..95897d5 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.16], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.17], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Andreas K. Hüttel]

commit:     18b1979734f57726c0a601ade0505c2e4615947d
Author:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
AuthorDate: Mon Mar 11 21:27:08 2019 +0000
Commit:     Andreas K. Hüttel <dilfridge <AT> gentoo <DOT> org>
CommitDate: Wed Mar 13 09:56:33 2019 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=18b19797

configure.ac: fix libc.so.6 detection on ld.gold

As reported by Mike Lothian below failed as:
    $ ./configure LDFLAGS=-fuse-ld=gold
> checking libc path... configure: error: Unable to determine LIBC PATH (/lib64/libc.so.6")

The regression happened in 3c0010366
("configure.ac: add lld detection support")
where "attempt" keyword in verbose linker log was used as a hint
to use bfd or gold output parser. Unfortunately ld.gold uses
"Attempt" spelling.

The change is to use the "[Aa]ttempt" substring matcher.
Tweak the parser to also match on "[Aa]ttempt" explicitly.

Tested on bfd, gold and lld.

Reported-by: Mike Lothian
Bug: https://bugs.gentoo.org/680034
Signed-off-by: Sergei Trofimovich <slyfox <AT> gentoo.org>
Signed-off-by: Andreas K. Hüttel <dilfridge <AT> gentoo.org>

 configure.ac | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/configure.ac b/configure.ac
index 8269b37..ca59928 100644
--- a/configure.ac
+++ b/configure.ac
@@ -345,10 +345,11 @@ try_link() {
 }
 LIBC_PATH=$(AS_IF(
 	dnl GNU linker (bfd & gold) searching for
-	dnl     "attempt to open /usr/lib/gcc/x86_64-pc-linux-gnu/8.3.0/../../../../lib64/libc.so succeeded"
+	dnl (bfd)  "attempt to open /usr/lib/gcc/x86_64-pc-linux-gnu/8.3.0/../../../../lib64/libc.so succeeded"
+	dnl (gold) "/usr/lib/gcc/x86_64-pc-linux-gnu/8.3.0/../../../../x86_64-pc-linux-gnu/bin/ld: Attempt to open /lib64/libc.so.6 succeeded"
 	dnl if log does not contain "attempt" word then it's not a GNU linker
-	[try_link -Wl,--verbose && grep -q attempt libctest.log],
-		[$AWK '/ttempt to open/ { if (($(NF-1) ~ /\/libc\.so/) && ($NF == "succeeded")) LIBC = $(NF-1); }; END {print LIBC}' libctest.log],
+	[try_link -Wl,--verbose && grep -q '[[Aa]]ttempt' libctest.log],
+		[$AWK '/[[Aa]]ttempt to open/ { if (($(NF-1) ~ /\/libc\.so/) && ($NF == "succeeded")) LIBC = $(NF-1); }; END {print LIBC}' libctest.log],
 	dnl LLVM lld searching for latest (successful) entry of
 	dnl     "ld.lld: /usr/lib/gcc/x86_64-pc-linux-gnu/8.3.0/../../../../lib64/libc.so"
 	dnl     "ld.lld: /lib64/libc.so.6"

[gentoo-commits] proj/sandbox:master commit in: /

[Andreas K. Hüttel]

commit:     d259fda6b0a0bbf32986d882b9691815d6a99af2
Author:     Andreas K. Hüttel <dilfridge <AT> gentoo <DOT> org>
AuthorDate: Sun Mar 10 10:18:49 2019 +0000
Commit:     Andreas K. Hüttel <dilfridge <AT> gentoo <DOT> org>
CommitDate: Sun Mar 10 10:18:49 2019 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=d259fda6

Bump to 2.16

Signed-off-by: Andreas K. Hüttel <dilfridge <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 3f242b4..8269b37 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.15], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.16], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Sergei Trofimovich]

commit:     3c001036637930152c038d084334d9a7311ffc6e
Author:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
AuthorDate: Thu Mar  7 23:41:54 2019 +0000
Commit:     Sergei Trofimovich <slyfox <AT> gentoo <DOT> org>
CommitDate: Fri Mar  8 07:35:55 2019 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=3c001036

configure.ac: add lld detection support

With this change
    $ ./configure CC=clang LDFLAGS='-Wl,--hash-style=gnu -fuse-ld=lld'
    $ make check
exposes 35 test failures

Bug: https://bugs.gentoo.org/672918
Signed-off-by: Sergei Trofimovich <slyfox <AT> gentoo.org>

 configure.ac | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/configure.ac b/configure.ac
index 8c1866c..3f242b4 100644
--- a/configure.ac
+++ b/configure.ac
@@ -344,9 +344,16 @@ try_link() {
 	) 1>&AS_MESSAGE_LOG_FD
 }
 LIBC_PATH=$(AS_IF(
-	dnl GNU linker (bfd & gold)
-	[try_link -Wl,--verbose],
+	dnl GNU linker (bfd & gold) searching for
+	dnl     "attempt to open /usr/lib/gcc/x86_64-pc-linux-gnu/8.3.0/../../../../lib64/libc.so succeeded"
+	dnl if log does not contain "attempt" word then it's not a GNU linker
+	[try_link -Wl,--verbose && grep -q attempt libctest.log],
 		[$AWK '/ttempt to open/ { if (($(NF-1) ~ /\/libc\.so/) && ($NF == "succeeded")) LIBC = $(NF-1); }; END {print LIBC}' libctest.log],
+	dnl LLVM lld searching for latest (successful) entry of
+	dnl     "ld.lld: /usr/lib/gcc/x86_64-pc-linux-gnu/8.3.0/../../../../lib64/libc.so"
+	dnl     "ld.lld: /lib64/libc.so.6"
+	[try_link -Wl,--verbose],
+		[$EGREP -o '/[[^ ]]*/libc.so.*' libctest.log | tail -n1],
 	dnl Solaris linker
 	[try_link -Wl,-m],
 		[set -- `$EGREP -o '/[[^ ]]*/libc.so' libctest.log`; echo $1]

[gentoo-commits] proj/sandbox:master commit in: /

[Michał Górny]

commit:     0866b74c29402d3df89b698e760713ce49c41eb9
Author:     Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Sun Jan 13 11:21:43 2019 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Sun Jan 13 11:38:51 2019 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=0866b74c

Remove pointless .pch support

Signed-off-by: Michał Górny <mgorny <AT> gentoo.org>

 Makefile.am  | 38 +++-----------------------------------
 configure.ac |  9 ---------
 2 files changed, 3 insertions(+), 44 deletions(-)

diff --git a/Makefile.am b/Makefile.am
index eb54f42..c730dba 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -13,44 +13,12 @@ SUBDIRS = \
 
 noinst_LTLIBRARIES =
 
-SANDBOX_PCH = headers.h.gch libsandbox/headers.h.gch libsbutil/headers.h.gch
-nodist_libpch_la_SOURCES = $(SANDBOX_PCH)
-GCH_CP = ( \
-	src=`dirname $@`/.libs/`basename $@`.o; \
-	test -e "$$src" || src=$@.o; \
-	cp $$src $@ \
-	)
-# This is built as PIC
-$(builddir)/libsbutil/headers.h.gch: headers.h
-	$(AM_V_GEN)$(LTCOMPILE) -c -o $@.o $< && $(GCH_CP)
-# This is built as PIC + exceptions
-$(builddir)/libsandbox/headers.h.gch: headers.h
-	$(AM_V_GEN)$(LTCOMPILE) -c -o $@.o $< $(CFLAG_EXCEPTIONS) && $(GCH_CP)
-# This is built w/out PIC
-$(builddir)/headers.h.gch: headers.h
-	$(AM_V_GEN)$(COMPILE) -c -o $@.o $< && $(GCH_CP)
-
-if SB_BUILD_PCH
-BUILT_SOURCES = $(SANDBOX_PCH)
-noinst_LTLIBRARIES += libpch.la
-
-LIBSBUTIL_PCH = libsbutil/headers.h.gch
-LIBSANDBOX_PCH = libsandbox/headers.h.gch
-TOP_PCH = headers.h.gch
-
-# Make sure we build the subdirs before the top so they don't
-# try to use the top level headers.h.pch.
-$(TOP_PCH): $(LIBSBUTIL_PCH) $(LIBSANDBOX_PCH)
-endif
-
-libsbutil: $(LIBSBUTIL_PCH)
-libsandbox: libsbutil $(LIBSANDBOX_PCH)
-src: libsbutil $(TOP_PCH)
-tests: src $(TOP_PCH)
+libsandbox: libsbutil
+src: libsbutil
+tests: src
 
 EXTRA_DIST = headers.h localdecls.h ChangeLog.0
 
-CLEANFILES = $(SANDBOX_PCH)
 DISTCLEANFILES = $(CLEANFILES)
 
 ChangeLog:

diff --git a/configure.ac b/configure.ac
index d4886b3..191d096 100644
--- a/configure.ac
+++ b/configure.ac
@@ -38,14 +38,6 @@ LT_INIT([disable-static])
 
 AC_PREFIX_DEFAULT([/usr])
 
-dnl allow pch to be controlled
-AC_MSG_CHECKING([whether to use pre-compiled sandbox headers])
-AC_ARG_ENABLE([pch],
-	[AS_HELP_STRING([--disable-pch],[Disable pre-compiled headers])],
-	[],[enable_pch="yes"])
-AM_CONDITIONAL([SB_BUILD_PCH], test "$enable_pch" = "yes")
-AC_MSG_RESULT($enable_pch)
-
 dnl multiple personality support (x86 & x86_64: multilib)
 AC_MSG_CHECKING([for multiple personalities])
 AC_ARG_ENABLE([schizo],
@@ -425,7 +417,6 @@ AC_SUBST([CFLAG_EXCEPTIONS])
 CPPFLAGS="$CPPFLAGS -D_REENTRANT"
 AX_CFLAGS_WARN_ALL
 AC_DEFUN([SB_CHECK_CFLAG],[AX_CHECK_COMPILE_FLAG([$1],[CFLAGS="$CFLAGS $1"])])
-SB_CHECK_CFLAG([-Winvalid-pch])
 SB_CHECK_CFLAG([-fdata-sections])
 SB_CHECK_CFLAG([-ffunction-sections])
 dnl We have our own wrapped memory functions.

[gentoo-commits] proj/sandbox:master commit in: /

[Michał Górny]

commit:     0e4331e07a560b04f537741d0a56ecf8338e8e3d
Author:     Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Wed Jan  9 13:40:02 2019 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Wed Jan  9 13:40:08 2019 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=0e4331e0

Bump to 2.15

Signed-off-by: Michał Górny <mgorny <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index ca352a3..d4886b3 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.14], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.15], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Michał Górny]

commit:     7fe61d246fa138010f3720a737e6a2da5175c2a9
Author:     Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Sun Dec  2 15:27:34 2018 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Sun Dec  2 15:28:29 2018 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=7fe61d24

Bump to 2.14

Signed-off-by: Michał Górny <mgorny <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 6ed42df..ca352a3 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.13], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.14], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Michał Górny]

commit:     7025fb7c13b2b180997e51d2d8dd9e86fd3059c4
Author:     Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Tue Oct  3 21:24:07 2017 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Tue Oct  3 21:24:07 2017 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=7025fb7c

Post-release bump to 2.13

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index c91db66..6ed42df 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.12], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.13], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     04250fcd67b2558cd24f561ef47e9d14e91f3d1f
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Tue Mar 29 11:14:48 2016 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Tue Mar 29 11:14:48 2016 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=04250fcd

bump to sandbox-2.12

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 18be54b..c91db66 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.11], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.12], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     bca0183c33356df09669f19f2b40c20f7de7dc11
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sun Dec 20 21:07:59 2015 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sun Dec 20 21:07:59 2015 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=bca0183c

build: disable gc-sections on ia64 systems

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index b8430dd..18be54b 100644
--- a/configure.ac
+++ b/configure.ac
@@ -434,7 +434,10 @@ SB_CHECK_CFLAG([-fno-builtin-malloc])
 SB_CHECK_CFLAG([-fno-builtin-realloc])
 AC_DEFUN([SB_CHECK_LDFLAG],[AX_CHECK_LINK_FLAG([-Wl,$1],[LDFLAGS="$LDFLAGS -Wl,$1"])])
 SB_CHECK_LDFLAG([--as-needed])
-SB_CHECK_LDFLAG([--gc-sections])
+dnl Itanium systems do not like this flag, so disable it to avoid warnings.
+if test "$host_cpu" != "ia64" ; then
+	SB_CHECK_LDFLAG([--gc-sections])
+fi
 case $host_os in
 	dnl bsd is dumb (environ)
 	*linux*) SB_CHECK_LDFLAG([--no-undefined]) ;;

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     20d27a2064a5ea30cc8a2e8d91e7b64c15a982b3
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sun Dec 20 00:12:30 2015 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sun Dec 20 00:12:30 2015 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=20d27a20

build: fix SB_SCHIZO automake conditional

The rework in commit 46fe624223cfe62fb6c2fbb609be42f2f1d1734b broke the
set up of the SB_SCHIZO automake conditional for non-schizo builds as it
was not updated to the new variable.  This would cause the syscall table
to always be empty and thus the ptrace code would never match.

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 25711cc..64089d7 100644
--- a/configure.ac
+++ b/configure.ac
@@ -88,7 +88,7 @@ if test "x$enable_schizo" != "xno" ; then
 fi
 AC_SUBST(SB_SCHIZO_SETTINGS)
 AC_SUBST(SB_SCHIZO_HEADERS)
-AM_CONDITIONAL([SB_SCHIZO], test "$SB_SCHIZO_SETTINGS" != "no")
+AM_CONDITIONAL([SB_SCHIZO], [test "x$enable_schizo" != "xno"])
 
 dnl this test fills up the stack and then triggers a segfault ...
 dnl but it's hard to wrap things without a stack, so let's ignore

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     48520a35697aa39bed046b9668a3e3e5f8a8ba93
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sun Dec 20 08:31:59 2015 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sun Dec 20 08:31:59 2015 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=48520a35

build: fix schizo match on x86 hosts

Forgot to include the trailing glob.  Not a big deal as few people use
it with these targets.

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index fd783b7..b8430dd 100644
--- a/configure.ac
+++ b/configure.ac
@@ -75,7 +75,8 @@ AC_DEFUN([SB_CHECK_SCHIZO],[dnl
 if test "x$enable_schizo" != "xno" ; then
 	enable_schizo=no
 	case $host in
-	i686*linux|x86_64*linux*)
+	i686*linux*|\
+	x86_64*linux*)
 		SB_CHECK_SCHIZO([x86_64], [-m64])
 		SB_CHECK_SCHIZO([x86], [-m32])
 		SB_CHECK_SCHIZO([x32], [-mx32])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     317e792b325ca26fe6e959d5d4e511d154f3a228
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sat Dec 19 17:56:59 2015 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sat Dec 19 17:56:59 2015 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=317e792b

bump to sandbox-2.11

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 081398c..25711cc 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.69])
-AC_INIT([sandbox], [2.10], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.11], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.14 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     02e6877248660a14186677446c86210474175529
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sun Sep 27 06:27:36 2015 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sun Sep 27 06:27:36 2015 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=02e68772

bump to sandbox-2.10

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index 843bb97..2e1bc9d 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.61])
-AC_INIT([sandbox], [2.9], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.10], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.12 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     bc335f26c83893596cecf2dc65bbeed81e76f2b8
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sun Sep 20 08:15:52 2015 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sun Sep 20 08:15:52 2015 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=bc335f26

bump to sandbox-2.9

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index e705d41..dec9686 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.61])
-AC_INIT([sandbox], [2.8], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.9], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.12 dist-xz no-dist-gzip silent-rules subdir-objects -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     a9f88e265dfc15e03985c104318209e80de3a897
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sun Sep 20 07:00:21 2015 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sun Sep 20 07:00:21 2015 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=a9f88e26

gitignore: ignore .dirstamp files

Sometimes autotools generates these on us.

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 .gitignore | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.gitignore b/.gitignore
index 25964e1..76d3d1a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,6 +6,7 @@ a.out
 *.o
 .deps
 .libs
+.dirstamp
 Makefile
 Makefile.in
 

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     a3b76337755aa108303fde03b81ee03a81df53f5
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sun Sep 13 05:23:56 2015 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sun Sep 13 05:23:56 2015 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=a3b76337

bump to sandbox-2.8

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.ac b/configure.ac
index fc63f4d..686ae4d 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.61])
-AC_INIT([sandbox], [2.7], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.8], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.12 dist-xz no-dist-gzip silent-rules -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     d89ef22c0533b4e5ea195bf10c961dfd6fdfd5ab
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sun Sep 13 05:27:14 2015 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sun Sep 13 05:27:14 2015 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=d89ef22c

gitignore: ignore configure.lineno

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 .gitignore | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.gitignore b/.gitignore
index 4d34aee..25964e1 100644
--- a/.gitignore
+++ b/.gitignore
@@ -34,6 +34,7 @@ core
 /config.status
 /config.sub
 /configure
+/configure.lineno
 /depcomp
 /install-sh
 /libtool

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     5923bf16687481d275aa8d2e8ebaf4d9c5b32676
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sun Sep 20 06:32:38 2015 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sun Sep 20 06:32:38 2015 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=5923bf16

build: do not let gcc rewrite memory calls

We don't want gcc to rewrite malloc/memset calls to calloc as it
will make calloc recursively call itself.  Add other memory calls
just to be safe.

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 configure.ac | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/configure.ac b/configure.ac
index 686ae4d..73227db 100644
--- a/configure.ac
+++ b/configure.ac
@@ -391,6 +391,10 @@ AC_DEFUN([SB_CHECK_CFLAG],[AX_CHECK_COMPILE_FLAG([$1],[CFLAGS="$CFLAGS $1"])])
 SB_CHECK_CFLAG([-Winvalid-pch])
 SB_CHECK_CFLAG([-fdata-sections])
 SB_CHECK_CFLAG([-ffunction-sections])
+dnl We have our own wrapped memory functions.
+SB_CHECK_CFLAG([-fno-builtin-calloc])
+SB_CHECK_CFLAG([-fno-builtin-malloc])
+SB_CHECK_CFLAG([-fno-builtin-realloc])
 AC_DEFUN([SB_CHECK_LDFLAG],[AX_CHECK_LINK_FLAG([-Wl,$1],[LDFLAGS="$LDFLAGS -Wl,$1"])])
 SB_CHECK_LDFLAG([--as-needed])
 SB_CHECK_LDFLAG([--gc-sections])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     69d49d18422d3dc67ec08a1d565e0503b813e321
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sun Mar  3 11:37:37 2013 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sun Mar  3 11:37:37 2013 +0000
URL:        https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=69d49d18

TODO: note more work needed for message framework

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

 TODO | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/TODO b/TODO
index 6470621..c8d1109 100644
--- a/TODO
+++ b/TODO
@@ -27,3 +27,16 @@ doesnt seem to work quite right:
 	echo $(./vfork-0 ./mkdir_static-0 2>&1)
 
 handle env var modification inside of traced apps
+
+messaging still needs a little work.  consider:
+ - user is running as root
+ - user does `emerge foo`
+ - emerge's stderr is connected to root's tty
+ - FEATURES=userpriv is enabled so portage drops root
+ - sandbox starts up and sets message path to its stderr
+ - that path is owned by root only
+ - attempts to open it by path fail with permission denied
+really only way around this would be to have sandbox set up
+a named pipe in $T and set the message path to that.  then
+it would poll that for data and take care of writing it to
+its open stderr.

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     5b8bf14633ffb670a01f3ff54d632c4471587c32
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Fri Nov 23 06:26:23 2012 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Fri Nov 23 06:33:04 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commit;h=5b8bf146

require at least automake 1.12

Keeps me from chasing down warnings that differ between 1.11 and 1.12.

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

---
 INSTALL      |    8 ++++----
 configure.ac |    4 ++--
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/INSTALL b/INSTALL
index a1e89e1..6e90e07 100644
--- a/INSTALL
+++ b/INSTALL
@@ -1,7 +1,7 @@
 Installation Instructions
 *************************
 
-Copyright (C) 1994-1996, 1999-2002, 2004-2011 Free Software Foundation,
+Copyright (C) 1994-1996, 1999-2002, 2004-2012 Free Software Foundation,
 Inc.
 
    Copying and distribution of this file, with or without modification,
@@ -309,9 +309,10 @@ causes the specified `gcc' to be used as the C compiler (unless it is
 overridden in the site shell script).
 
 Unfortunately, this technique does not work for `CONFIG_SHELL' due to
-an Autoconf bug.  Until the bug is fixed you can use this workaround:
+an Autoconf limitation.  Until the limitation is lifted, you can use
+this workaround:
 
-     CONFIG_SHELL=/bin/bash /bin/bash ./configure CONFIG_SHELL=/bin/bash
+     CONFIG_SHELL=/bin/bash ./configure CONFIG_SHELL=/bin/bash
 
 `configure' Invocation
 ======================
@@ -367,4 +368,3 @@ operates.
 
 `configure' also accepts some other, not widely useful, options.  Run
 `configure --help' for more details.
-

diff --git a/configure.ac b/configure.ac
index ca0d3ac..dca43f7 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,6 +1,6 @@
 AC_PREREQ([2.61])
 AC_INIT([sandbox], [2.7], [sandbox@gentoo.org])
-AM_INIT_AUTOMAKE([1.11.1 dist-xz no-dist-gzip silent-rules -Wall])
+AM_INIT_AUTOMAKE([1.12 dist-xz no-dist-gzip silent-rules -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])
 AC_CONFIG_MACRO_DIR([m4])
@@ -26,7 +26,7 @@ AC_ISC_POSIX
 AC_USE_SYSTEM_EXTENSIONS
 
 dnl Checks for programs.
-#AM_PROG_AR
+AM_PROG_AR
 AC_PROG_INSTALL
 AC_PROG_MAKE_SET
 AC_PROG_AWK

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     f2500f5954611d110ac18e9990f42d5a915f8101
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Tue Aug 28 16:19:56 2012 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sat Nov 17 19:15:58 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commit;h=f2500f59

add a configure option to control pch usage

Mostly for testing purposes.  This also tweaks the dependency to fix a
warning when generating the headers.h.pch in subdirs when the toplevel
headers.h.pch already exists.

URL: http://bugs.gentoo.org/425524
Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

---
 Makefile.am  |   25 +++++++++++++++++++------
 configure.ac |   12 ++++++++++--
 2 files changed, 29 insertions(+), 8 deletions(-)

diff --git a/Makefile.am b/Makefile.am
index 475c8c0..eb54f42 100644
--- a/Makefile.am
+++ b/Makefile.am
@@ -11,9 +11,9 @@ SUBDIRS = \
 	src        \
 	tests
 
+noinst_LTLIBRARIES =
+
 SANDBOX_PCH = headers.h.gch libsandbox/headers.h.gch libsbutil/headers.h.gch
-BUILT_SOURCES = $(SANDBOX_PCH)
-noinst_LTLIBRARIES = libpch.la
 nodist_libpch_la_SOURCES = $(SANDBOX_PCH)
 GCH_CP = ( \
 	src=`dirname $@`/.libs/`basename $@`.o; \
@@ -30,10 +30,23 @@ $(builddir)/libsandbox/headers.h.gch: headers.h
 $(builddir)/headers.h.gch: headers.h
 	$(AM_V_GEN)$(COMPILE) -c -o $@.o $< && $(GCH_CP)
 
-libsbutil: libsbutil/headers.h.gch
-libsandbox: libsbutil libsandbox/headers.h.gch
-src: libsbutil headers.h.gch
-tests: src headers.h.gch
+if SB_BUILD_PCH
+BUILT_SOURCES = $(SANDBOX_PCH)
+noinst_LTLIBRARIES += libpch.la
+
+LIBSBUTIL_PCH = libsbutil/headers.h.gch
+LIBSANDBOX_PCH = libsandbox/headers.h.gch
+TOP_PCH = headers.h.gch
+
+# Make sure we build the subdirs before the top so they don't
+# try to use the top level headers.h.pch.
+$(TOP_PCH): $(LIBSBUTIL_PCH) $(LIBSANDBOX_PCH)
+endif
+
+libsbutil: $(LIBSBUTIL_PCH)
+libsandbox: libsbutil $(LIBSANDBOX_PCH)
+src: libsbutil $(TOP_PCH)
+tests: src $(TOP_PCH)
 
 EXTRA_DIST = headers.h localdecls.h ChangeLog.0
 

diff --git a/configure.ac b/configure.ac
index 661b494..ca0d3ac 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,6 +1,6 @@
 AC_PREREQ([2.61])
 AC_INIT([sandbox], [2.7], [sandbox@gentoo.org])
-AM_INIT_AUTOMAKE([1.11.6 dist-xz no-dist-gzip silent-rules -Wall])
+AM_INIT_AUTOMAKE([1.11.1 dist-xz no-dist-gzip silent-rules -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])
 AC_CONFIG_MACRO_DIR([m4])
@@ -26,7 +26,7 @@ AC_ISC_POSIX
 AC_USE_SYSTEM_EXTENSIONS
 
 dnl Checks for programs.
-AM_PROG_AR
+#AM_PROG_AR
 AC_PROG_INSTALL
 AC_PROG_MAKE_SET
 AC_PROG_AWK
@@ -38,6 +38,14 @@ LT_INIT([disable-static])
 
 AC_PREFIX_DEFAULT([/usr])
 
+dnl allow pch to be controlled
+AC_MSG_CHECKING([whether to use pre-compiled sandbox headers])
+AC_ARG_ENABLE([pch],
+	[AS_HELP_STRING([--disable-pch],[Disable pre-compiled headers])],
+	[],[enable_pch="yes"])
+AM_CONDITIONAL([SB_BUILD_PCH], test "$enable_pch" = "yes")
+AC_MSG_RESULT($enable_pch)
+
 dnl multiple personality support (x86 & x86_64: multilib)
 AC_MSG_CHECKING([for multiple personalities])
 AC_ARG_ENABLE([schizo],

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     49d9bad488401392f38f2a3de80f0e424bcccaec
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Mon Aug 13 03:08:27 2012 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sat Nov 17 19:15:58 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commit;h=49d9bad4

require at least automake 1.11.6

We use AM_PROG_AR which was added after 1.11.1 at some point.

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

---
 configure.ac |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/configure.ac b/configure.ac
index 3529dcf..661b494 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,6 +1,6 @@
 AC_PREREQ([2.61])
 AC_INIT([sandbox], [2.7], [sandbox@gentoo.org])
-AM_INIT_AUTOMAKE([1.11 dist-xz no-dist-gzip silent-rules -Wall])
+AM_INIT_AUTOMAKE([1.11.6 dist-xz no-dist-gzip silent-rules -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])
 AC_CONFIG_MACRO_DIR([m4])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     d51f63bfc0afd8c4ba7a529425add45df2aad3f8
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Mon Aug 13 03:08:03 2012 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sat Nov 17 19:15:58 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commit;h=d51f63bf

fix generating autotools when no autoconf-archive is missing

Make sure lm4s is an array even when unset.

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

---
 autogen.sh |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/autogen.sh b/autogen.sh
index 8ff14d5..8a53fc8 100755
--- a/autogen.sh
+++ b/autogen.sh
@@ -10,7 +10,7 @@ find m4/*.m4 '!' -name 'ax_*.m4' -delete 2>/dev/null || :
 # not everyone has sys-devel/autoconf-archive installed
 has() { [[ " ${*:2} " == *" $1 "* ]] ; }
 import_ax() {
-	local macro content m4 lm4s
+	local macro content m4 lm4s=()
 	content=$(sed -e '/^[[:space:]]*#/d' -e 's:\<dnl\>.*::' "$@")
 	for macro in $(echo "${content}" | grep -o '\<AX[A-Z_]*\>' | sort -u) ; do
 		if m4=$(grep -rl "\[${macro}\]" /usr/share/aclocal/) ; then

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     55c01af683271d91e38e46a1d5637375347c1020
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Tue Jul  3 19:42:36 2012 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Tue Jul  3 19:42:46 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commit;h=55c01af6

bump to sandbox-2.7

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

---
 configure.ac |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/configure.ac b/configure.ac
index 3bf3a8c..65811dc 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.61])
-AC_INIT([sandbox], [2.6], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.7], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.11 dist-xz no-dist-gzip silent-rules -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     3ddcf39b393511930718ea72eae0ff7ba5c87f1d
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Tue Jul  3 04:43:21 2012 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Tue Jul  3 18:27:44 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commit;h=3ddcf39b

include stdint.h/inttypes.h too

These contain useful defines which we sometimes want to leverage.

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

---
 configure.ac |    2 ++
 headers.h    |    6 ++++++
 2 files changed, 8 insertions(+), 0 deletions(-)

diff --git a/configure.ac b/configure.ac
index a6fcd5b..26f6822 100644
--- a/configure.ac
+++ b/configure.ac
@@ -76,6 +76,7 @@ AC_CHECK_HEADERS_ONCE(m4_flatten([
 	execinfo.h
 	fcntl.h
 	grp.h
+	inttypes.h
 	libgen.h
 	limits.h
 	memory.h
@@ -87,6 +88,7 @@ AC_CHECK_HEADERS_ONCE(m4_flatten([
 	stdarg.h
 	stdbool.h
 	stddef.h
+	stdint.h
 	stdio.h
 	stdlib.h
 	string.h

diff --git a/headers.h b/headers.h
index ab9c17d..512c85b 100644
--- a/headers.h
+++ b/headers.h
@@ -32,6 +32,9 @@
 #ifdef HAVE_GRP_H
 # include <grp.h>
 #endif
+#ifdef HAVE_INTTYPES_H
+# include <inttypes.h>
+#endif
 #ifdef HAVE_LIBGEN_H
 # include <libgen.h>
 #endif
@@ -62,6 +65,9 @@
 #ifdef HAVE_STDDEF_H
 # include <stddef.h>
 #endif
+#ifdef HAVE_STDINT_H
+# include <stdint.h>
+#endif
 #ifdef HAVE_STDIO_H
 # include <stdio.h>
 #endif

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     4fcb367b1a7ff06a55c8bc4a25c38e46b77a1261
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Sat Jun 23 02:42:08 2012 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sat Jun 23 23:07:27 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commit;h=4fcb367b

libsandbox: handle broken kernel headers

Sometimes the struct in asm/ptrace.h is too small for what the kernel
actually writes.  Check to see which struct is larger (the one that the
kernel declares or the C library declares), and use that.

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

---
 configure.ac |    2 ++
 localdecls.h |   11 +++++++++++
 2 files changed, 13 insertions(+), 0 deletions(-)

diff --git a/configure.ac b/configure.ac
index da6f75d..573e412 100644
--- a/configure.ac
+++ b/configure.ac
@@ -119,6 +119,8 @@ AC_CHECK_TYPES([sighandler_t, sig_t, __sighandler_t],,,[#include <signal.h>])
 save_CPPFLAGS=$CPPFLAGS
 CPPFLAGS="-I$srcdir $CPPFLAGS"
 AC_CHECK_TYPES([struct user_regs_struct, struct pt_regs],,,[#include "headers.h"])
+AC_CHECK_SIZEOF([struct user_regs_struct],,[#include "headers.h"])
+AC_CHECK_SIZEOF([struct pt_regs],,[#include "headers.h"])
 CPPFLAGS=$save_CPPFLAGS
 
 dnl Checks for library functions.

diff --git a/localdecls.h b/localdecls.h
index eef7295..be99617 100644
--- a/localdecls.h
+++ b/localdecls.h
@@ -68,6 +68,17 @@ typedef __sighandler_t sighandler_t;
 #endif
 
 #define HAVE_TRACE_REGS
+#if defined(HAVE_STRUCT_PT_REGS) && defined(HAVE_STRUCT_USER_REGS_STRUCT)
+/*
+ * Some systems have broken kernel headers who declare struct pt_regs as
+ * smaller than what the kernel actually operates on.  If we have both
+ * reg structs available, pick the one that is larger in the hopes that
+ * we won't randomly clobber memory.
+ */
+# if SIZEOF_STRUCT_PT_REGS < SIZEOF_STRUCT_USER_REGS_STRUCT
+#  undef HAVE_STRUCT_PT_REGS
+# endif
+#endif
 #if defined(HAVE_STRUCT_PT_REGS)
 typedef struct pt_regs trace_regs;
 #elif defined(HAVE_STRUCT_USER_REGS_STRUCT)

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     93e7a98c096a099e715618fd2d71b98947ecf0e7
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Wed Jun 20 13:00:25 2012 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sat Jun 23 21:33:18 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commit;h=93e7a98c

TODO: drop old entries, and add logging ones

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

---
 TODO |   10 ++++------
 1 files changed, 4 insertions(+), 6 deletions(-)

diff --git a/TODO b/TODO
index a8b3035..e8d1d14 100644
--- a/TODO
+++ b/TODO
@@ -1,17 +1,11 @@
 try out tracing on *BSD and Solaris
 
-add tests for tracing static binaries
-
 trace static children of static children
 
-inject errors into trace when violation occurs rather than kill the child
-
 cache results of filesystem checks
 
 review erealpath vs realpath usage
 
-add tests to make sure errno is saved/restored properly
-
 wrappers for execl{,l,p} ... unfortunately, we'll probably have to basically
 reimplement the functions (building up argv[] and then call the execv* ver)
 
@@ -25,5 +19,9 @@ threaded apps conflict with shared state:
  - trace_pid
  - etc...
 
+handle multiple processing writing to log simultaneously
+ - could move log to a fifo that the main sandbox process would consume
+ - not that big of a deal as log generally only gets written with failures
+
 doesnt seem to work quite right:
 	echo $(./vfork-0 ./mkdir_static-0 2>&1)

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     eedcba6f16365ab8c5213d72a5b2340b0b1012cf
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Fri Jun 22 22:37:05 2012 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Sat Jun 23 21:33:18 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commit;h=eedcba6f

use m4_flatten to make multiline lists easier to handle

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

---
 configure.ac |  190 +++++++++++++++++++++++++++++-----------------------------
 1 files changed, 95 insertions(+), 95 deletions(-)

diff --git a/configure.ac b/configure.ac
index ad8cf9a..da6f75d 100644
--- a/configure.ac
+++ b/configure.ac
@@ -65,46 +65,46 @@ AC_FUNC_ALLOCA
 AC_HEADER_DIRENT
 AC_HEADER_STDC
 AC_HEADER_SYS_WAIT
-AC_CHECK_HEADERS_ONCE([ \
-	dirent.h \
-	dlfcn.h \
-	elf.h \
-	errno.h \
-	execinfo.h \
-	fcntl.h \
-	grp.h \
-	libgen.h \
-	limits.h \
-	memory.h \
-	pthread.h \
-	pwd.h \
-	siginfo.h \
-	signal.h \
-	sigsegv.h \
-	stdarg.h \
-	stdbool.h \
-	stddef.h \
-	stdio.h \
-	stdlib.h \
-	string.h \
-	strings.h \
-	syscall.h \
-	unistd.h \
-	utime.h \
-	sys/file.h \
-	sys/mman.h \
-	sys/param.h \
-	sys/ptrace.h \
-	sys/reg.h \
-	sys/stat.h \
-	sys/syscall.h \
-	sys/time.h \
-	sys/types.h \
-	sys/user.h \
-	sys/wait.h \
-	asm/ptrace.h \
-	linux/ptrace.h \
-])
+AC_CHECK_HEADERS_ONCE(m4_flatten([
+	dirent.h
+	dlfcn.h
+	elf.h
+	errno.h
+	execinfo.h
+	fcntl.h
+	grp.h
+	libgen.h
+	limits.h
+	memory.h
+	pthread.h
+	pwd.h
+	siginfo.h
+	signal.h
+	sigsegv.h
+	stdarg.h
+	stdbool.h
+	stddef.h
+	stdio.h
+	stdlib.h
+	string.h
+	strings.h
+	syscall.h
+	unistd.h
+	utime.h
+	sys/file.h
+	sys/mman.h
+	sys/param.h
+	sys/ptrace.h
+	sys/reg.h
+	sys/stat.h
+	sys/syscall.h
+	sys/time.h
+	sys/types.h
+	sys/user.h
+	sys/wait.h
+	asm/ptrace.h
+	linux/ptrace.h
+]))
 
 dnl Checks for typedefs, structures, and compiler characteristics.
 dnl Do this after all headers have been checked.
@@ -128,61 +128,61 @@ AC_FUNC_LSTAT
 AC_FUNC_LSTAT_FOLLOWS_SLASHED_SYMLINK
 AC_TYPE_SIGNAL
 AC_FUNC_STAT
-AC_CHECK_FUNCS_ONCE([ \
-	backtrace \
-	creat64 \
-	faccessat \
-	fchmodat \
-	fchownat \
-	fopen64 \
-	ftruncate \
-	futimesat \
-	getcwd \
-	lchown \
-	linkat \
-	lutimes \
-	memmove \
-	memcpy \
-	memset \
-	mkdir \
-	mkdirat \
-	mkdtemp \
-	mkfifoat \
-	mknodat \
-	mkostemp \
-	mkostemp64 \
-	mkostemps \
-	mkostemps64 \
-	mkstemp \
-	mkstemp64 \
-	mkstemps \
-	mkstemps64 \
-	open64 \
-	openat \
-	openat64 \
-	pathconf \
-	ptrace \
-	realpath \
-	remove \
-	renameat \
-	rmdir \
-	setenv \
-	strcasecmp \
-	strchr \
-	strdup \
-	strerror \
-	strndup \
-	strrchr \
-	strspn \
-	strstr \
-	strtok_r \
-	symlinkat \
-	truncate64 \
-	unlinkat \
-	utime \
-	utimensat \
-	utimes \
-])
+AC_CHECK_FUNCS_ONCE(m4_flatten([
+	backtrace
+	creat64
+	faccessat
+	fchmodat
+	fchownat
+	fopen64
+	ftruncate
+	futimesat
+	getcwd
+	lchown
+	linkat
+	lutimes
+	memmove
+	memcpy
+	memset
+	mkdir
+	mkdirat
+	mkdtemp
+	mkfifoat
+	mknodat
+	mkostemp
+	mkostemp64
+	mkostemps
+	mkostemps64
+	mkstemp
+	mkstemp64
+	mkstemps
+	mkstemps64
+	open64
+	openat
+	openat64
+	pathconf
+	ptrace
+	realpath
+	remove
+	renameat
+	rmdir
+	setenv
+	strcasecmp
+	strchr
+	strdup
+	strerror
+	strndup
+	strrchr
+	strspn
+	strstr
+	strtok_r
+	symlinkat
+	truncate64
+	unlinkat
+	utime
+	utimensat
+	utimes
+]))
 AC_CHECK_LIB([sigsegv], [stackoverflow_install_handler],
 	[HAVE_LIBSIGSEGV=true],
 	[HAVE_LIBSIGSEGV=false])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     966a8f38b21a4f862fe0bf796664d82d9553b391
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Mon Mar  5 07:10:05 2012 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Tue Mar  6 05:16:06 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commit;h=966a8f38

libsandbox: add likely/unlikely support

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

---
 localdecls.h |    3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)

diff --git a/localdecls.h b/localdecls.h
index 3992834..590654d 100644
--- a/localdecls.h
+++ b/localdecls.h
@@ -113,4 +113,7 @@ typedef struct user_regs_struct trace_regs;
 
 #define attribute_hidden __attribute__((visibility("hidden")))
 
+#define likely(x)   __builtin_expect(!!(x), 1)
+#define unlikely(x) __builtin_expect(!!(x), 0)
+
 #endif

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     e1758c2cf0776a62398cd561402db63bd20ecd83
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Mon Mar  5 04:55:40 2012 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Mon Mar  5 07:00:12 2012 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commit;h=e1758c2c

update autotool files

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

---
 INSTALL |    9 +++++++--
 1 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/INSTALL b/INSTALL
index 7d1c323..a1e89e1 100644
--- a/INSTALL
+++ b/INSTALL
@@ -1,8 +1,8 @@
 Installation Instructions
 *************************
 
-Copyright (C) 1994, 1995, 1996, 1999, 2000, 2001, 2002, 2004, 2005,
-2006, 2007, 2008, 2009 Free Software Foundation, Inc.
+Copyright (C) 1994-1996, 1999-2002, 2004-2011 Free Software Foundation,
+Inc.
 
    Copying and distribution of this file, with or without modification,
 are permitted in any medium without royalty provided the copyright
@@ -226,6 +226,11 @@ order to use an ANSI C compiler:
 
 and if that doesn't work, install pre-built binaries of GCC for HP-UX.
 
+   HP-UX `make' updates targets which have the same time stamps as
+their prerequisites, which makes it generally unusable when shipped
+generated files such as `configure' are involved.  Use GNU `make'
+instead.
+
    On OSF/1 a.k.a. Tru64, some versions of the default C compiler cannot
 parse its `<wchar.h>' header file.  The option `-nodtk' can be used as
 a workaround.  If GNU CC is not installed, it is therefore recommended

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     92273e99dd31f84ec7d2513aea7352a2d19beec0
Author:     Diego Elio Pettenò <flameeyes <AT> gmail <DOT> com>
AuthorDate: Sun May 17 13:39:40 2009 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Mon Feb 14 06:09:01 2011 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commit;h=92273e99

make the libdl/dlopen/dlvsym tests more autoconfy

Instead of testing manually for libdl and then libc for dlopen, just use
AC_SEARCH_LIBS (and then AC_CHECK_FUNCS to check for dlvsym).  The code
is much nicer now.

Signed-off-by: Diego Elio Pettenò <flameeyes <AT> gmail.com>
Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

---
 configure.ac |   21 ++-------------------
 1 files changed, 2 insertions(+), 19 deletions(-)

diff --git a/configure.ac b/configure.ac
index a0a0a76..3f4025c 100644
--- a/configure.ac
+++ b/configure.ac
@@ -232,28 +232,11 @@ if echo " $LDFLAGS " | $EGREP ' -static ' >/dev/null 2>&1; then
 fi
 
 dnl Some libc's like those on bsd have dlopen() in libc, and not libdl
-AC_CHECK_LIB([dl], [dlopen],
-  [have_libdl="yes"],
-  [have_libdl="no"]
-)
-if test x"$have_libdl" = xyes ; then
-  LIBDL="-ldl"
-  AC_SUBST([LIBDL])
-  DL_LIB="dl"
-else
-  DL_LIB="c"
-  AC_CHECK_LIB([c], [dlopen],
-    [],
-    [AC_MSG_ERROR([Unable to determine library providing dlopen])]
-  )
-fi
+AC_SEARCH_LIBS([dlopen], [dl])
 
 dnl uClibc doesn't currently provide dlvsym() so lets
 dnl verify the toolchain supports it
-AC_CHECK_LIB([$DL_LIB], [dlvsym],
-  [AC_DEFINE([HAVE_DLVSYM], [1], [libdl supports dlvsym])],
-  [AC_DEFINE([HAVE_DLVSYM], [0], [libdl does not support dlvsym])]
-)
+AC_CHECK_FUNCS([dlvsym])
 
 dnl when using libc5, (f)trucate's offset argument type is size_t with
 dnl libc5, but it's off_t with libc6 (glibc2).

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     11c1c34be9c1342d7b3de6445b07cae2eaf0c9c6
Author:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
AuthorDate: Mon Feb 14 06:16:40 2011 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Mon Feb 14 06:16:40 2011 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commit;h=11c1c34b

bump to sandbox-2.6

Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

---
 configure.ac |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/configure.ac b/configure.ac
index 3f4025c..5c1a110 100644
--- a/configure.ac
+++ b/configure.ac
@@ -1,5 +1,5 @@
 AC_PREREQ([2.61])
-AC_INIT([sandbox], [2.5], [sandbox@gentoo.org])
+AC_INIT([sandbox], [2.6], [sandbox@gentoo.org])
 AM_INIT_AUTOMAKE([1.11 dist-xz no-dist-gzip silent-rules -Wall])
 AM_SILENT_RULES([yes]) # AM_INIT_AUTOMAKE([silent-rules]) is broken atm
 AC_CONFIG_HEADER([config.h])

[gentoo-commits] proj/sandbox:master commit in: /

[Mike Frysinger]

commit:     663ce763ca460a5644fc03d018ad55de038967ad
Author:     Diego Elio Pettenò <flameeyes <AT> gmail <DOT> com>
AuthorDate: Sun May 17 13:33:33 2009 +0000
Commit:     Mike Frysinger <vapier <AT> gentoo <DOT> org>
CommitDate: Mon Feb 14 06:08:13 2011 +0000
URL:        http://git.overlays.gentoo.org/gitweb/?p=proj/sandbox.git;a=commit;h=663ce763

use libtool 2.2 macro and avoid dirty hacks

Since we're already depending on a not-yet-released automake version, we
may as well depend on the already-released libtool 2.2.  This way we can
avoid the dirty trick of undefining the macros to check for CXX and F77.

Signed-off-by: Diego Elio Pettenò <flameeyes <AT> gmail.com>
Signed-off-by: Mike Frysinger <vapier <AT> gentoo.org>

---
 configure.ac |    9 +--------
 1 files changed, 1 insertions(+), 8 deletions(-)

diff --git a/configure.ac b/configure.ac
index e85d152..a0a0a76 100644
--- a/configure.ac
+++ b/configure.ac
@@ -31,14 +31,7 @@ AC_PROG_EGREP
 AC_CHECK_PROGS([READELF], [readelf eu-readelf], [false])
 AM_MISSING_PROG([AUTOM4TE], [autom4te])
 
-AC_ENABLE_SHARED
-AC_DISABLE_STATIC
-dnl Next four lines is a hack to prevent libtool checking for CXX/F77
-m4_undefine([AC_PROG_CXX])
-m4_defun([AC_PROG_CXX],[])
-m4_undefine([AC_PROG_F77])
-m4_defun([AC_PROG_F77],[])
-AC_PROG_LIBTOOL
+LT_INIT([disable-static])
 
 AC_PREFIX_DEFAULT([/usr])