From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 9C981158086 for ; Fri, 22 Oct 2021 04:20:12 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id CB256E0867; Fri, 22 Oct 2021 04:20:11 +0000 (UTC) Received: from smtp.gentoo.org (mail.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-CHACHA20-POLY1305 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id AF039E0867 for ; Fri, 22 Oct 2021 04:20:11 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-CHACHA20-POLY1305 (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id A3A6B342F19 for ; Fri, 22 Oct 2021 04:20:10 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id DD68D132 for ; Fri, 22 Oct 2021 04:20:08 +0000 (UTC) From: "Mike Frysinger" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Mike Frysinger" Message-ID: <1634876384.60cff8d682fe7816ca0656d4da27e630855287e7.vapier@gentoo> Subject: [gentoo-commits] proj/sandbox:master commit in: libsandbox/ X-VCS-Repository: proj/sandbox X-VCS-Files: libsandbox/libsandbox.c X-VCS-Directories: libsandbox/ X-VCS-Committer: vapier X-VCS-Committer-Name: Mike Frysinger X-VCS-Revision: 60cff8d682fe7816ca0656d4da27e630855287e7 X-VCS-Branch: master Date: Fri, 22 Oct 2021 04:20:08 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: 7f03ae97-d5b7-43a4-ade6-3dec12a10ea8 X-Archives-Hash: fa1c5b45e895a1b4737736c33728b8fe commit: 60cff8d682fe7816ca0656d4da27e630855287e7 Author: Mike Frysinger gentoo org> AuthorDate: Fri Oct 22 04:18:15 2021 +0000 Commit: Mike Frysinger gentoo org> CommitDate: Fri Oct 22 04:19:44 2021 +0000 URL: https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=60cff8d6 libsandbox: drop old *.py[co] hack #775416 With our eclasses & python frameworks responsible for generating these files now, we should be able to reject write attempts to these again. Lets turn it back on and see what blows up. Bug: http://bugs.gentoo.org/256953 Closes: https://bugs.gentoo.org/775416 Signed-off-by: Mike Frysinger gentoo.org> libsandbox/libsandbox.c | 14 -------------- 1 file changed, 14 deletions(-) diff --git a/libsandbox/libsandbox.c b/libsandbox/libsandbox.c index beaf305..4e92cbe 100644 --- a/libsandbox/libsandbox.c +++ b/libsandbox/libsandbox.c @@ -868,20 +868,6 @@ static int check_access(sbcontext_t *sbcontext, int sb_nr, const char *func, goto out; } - /* A very common bug (apparently) is for .py[co] files to fall out - * of sync with their .py source files. Rather than trigger a hard - * failure, let's just whine about it. Once python itself gets - * sorted out, we can drop this #256953. - */ - size_t len = strlen(resolv_path); - if (len > 4) { - const char *py = resolv_path + len - 4; - if (!strcmp(py, ".pyc") || !strcmp(py, ".pyo")) { - sbcontext->show_access_violation = false; - goto out; - } - } - /* If we are here, and still no joy, and its the access() call, * do not log it, but just return -1 */ if (sb_nr == SB_NR_ACCESS_WR) {