From: "Ulrich Müller" <ulm@gentoo.org> To: gentoo-commits@lists.gentoo.org Subject: [gentoo-commits] proj/pms:eapi-9 commit in: / Date: Sun, 2 Jun 2024 09:57:34 +0000 (UTC) [thread overview] Message-ID: <1703423152.aecb51e70f8546fd7f55144f9035ca982ab6fae1.ulm@gentoo> (raw) commit: aecb51e70f8546fd7f55144f9035ca982ab6fae1 Author: Ulrich Müller <ulm <AT> gentoo <DOT> org> AuthorDate: Sun Dec 24 13:05:52 2023 +0000 Commit: Ulrich Müller <ulm <AT> gentoo <DOT> org> CommitDate: Sun Dec 24 13:05:52 2023 +0000 URL: https://gitweb.gentoo.org/proj/pms.git/commit/?id=aecb51e7 pkg-mgr-commands.tex: Sandbox commands accept any file The sandbox commands addread, addwrite, addpredict and adddeny can accept not only directories, but also other files like regular files or device nodes. This behaviour is supported by all three package managers. Also, the sandbox's default configuration relies on it (e.g. "/dev/null" and "${HOME}/.bash_history" in /etc/sandbox.conf), and it is widely used in the Gentoo repository. Signed-off-by: Ulrich Müller <ulm <AT> gentoo.org> pkg-mgr-commands.tex | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/pkg-mgr-commands.tex b/pkg-mgr-commands.tex index b6113f6..2202b64 100644 --- a/pkg-mgr-commands.tex +++ b/pkg-mgr-commands.tex @@ -89,14 +89,14 @@ called, the package manager must abort the build process indicating an error. \end{centertable} \subsection{Sandbox commands} -These commands affect the behaviour of the sandbox. Each command takes a single directory as -argument. Ebuilds must not run any of these commands once the current phase function has returned. +These commands affect the behaviour of the sandbox. Each command takes a single path as argument. +Ebuilds must not run any of these commands once the current phase function has returned. \begin{description} -\item[addread] Add a directory to the permitted read list. -\item[addwrite] Add a directory to the permitted write list. -\item[addpredict] Add a directory to the predict list. Any write to a location in this list will be +\item[addread] Add a path to the permitted read list. +\item[addwrite] Add a path to the permitted write list. +\item[addpredict] Add a path to the predict list. Any write to a location in this list will be denied, but will not trigger access violation messages or abort the build process. -\item[adddeny] Add a directory to the deny list. +\item[adddeny] Add a path to the deny list. \end{description} \subsection{Package manager query commands}
WARNING: multiple messages have this Message-ID (diff)
From: "Ulrich Müller" <ulm@gentoo.org> To: gentoo-commits@lists.gentoo.org Subject: [gentoo-commits] proj/pms:master commit in: / Date: Thu, 28 Dec 2023 08:00:48 +0000 (UTC) [thread overview] Message-ID: <1703423152.aecb51e70f8546fd7f55144f9035ca982ab6fae1.ulm@gentoo> (raw) Message-ID: <20231228080048.93sNRUCOHoHjJnq6mi_udPKNktwpRO7BbYr2KtRRkiA@z> (raw) commit: aecb51e70f8546fd7f55144f9035ca982ab6fae1 Author: Ulrich Müller <ulm <AT> gentoo <DOT> org> AuthorDate: Sun Dec 24 13:05:52 2023 +0000 Commit: Ulrich Müller <ulm <AT> gentoo <DOT> org> CommitDate: Sun Dec 24 13:05:52 2023 +0000 URL: https://gitweb.gentoo.org/proj/pms.git/commit/?id=aecb51e7 pkg-mgr-commands.tex: Sandbox commands accept any file The sandbox commands addread, addwrite, addpredict and adddeny can accept not only directories, but also other files like regular files or device nodes. This behaviour is supported by all three package managers. Also, the sandbox's default configuration relies on it (e.g. "/dev/null" and "${HOME}/.bash_history" in /etc/sandbox.conf), and it is widely used in the Gentoo repository. Signed-off-by: Ulrich Müller <ulm <AT> gentoo.org> pkg-mgr-commands.tex | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/pkg-mgr-commands.tex b/pkg-mgr-commands.tex index b6113f6..2202b64 100644 --- a/pkg-mgr-commands.tex +++ b/pkg-mgr-commands.tex @@ -89,14 +89,14 @@ called, the package manager must abort the build process indicating an error. \end{centertable} \subsection{Sandbox commands} -These commands affect the behaviour of the sandbox. Each command takes a single directory as -argument. Ebuilds must not run any of these commands once the current phase function has returned. +These commands affect the behaviour of the sandbox. Each command takes a single path as argument. +Ebuilds must not run any of these commands once the current phase function has returned. \begin{description} -\item[addread] Add a directory to the permitted read list. -\item[addwrite] Add a directory to the permitted write list. -\item[addpredict] Add a directory to the predict list. Any write to a location in this list will be +\item[addread] Add a path to the permitted read list. +\item[addwrite] Add a path to the permitted write list. +\item[addpredict] Add a path to the predict list. Any write to a location in this list will be denied, but will not trigger access violation messages or abort the build process. -\item[adddeny] Add a directory to the deny list. +\item[adddeny] Add a path to the deny list. \end{description} \subsection{Package manager query commands}
next reply other threads:[~2024-06-02 9:57 UTC|newest] Thread overview: 197+ messages / expand[flat|nested] mbox.gz Atom feed top 2024-06-02 9:57 Ulrich Müller [this message] 2023-12-28 8:00 ` [gentoo-commits] proj/pms:master commit in: / Ulrich Müller -- strict thread matches above, loose matches on Subject: below -- 2025-06-08 20:38 [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2025-06-08 20:38 Ulrich Müller 2025-06-08 20:38 Ulrich Müller 2025-06-08 20:38 Ulrich Müller 2025-06-08 20:38 Ulrich Müller 2025-06-08 20:38 Ulrich Müller 2025-06-08 20:38 Ulrich Müller 2025-06-08 20:38 Ulrich Müller 2025-06-08 20:38 Ulrich Müller 2025-06-08 20:38 Ulrich Müller 2025-06-08 20:38 Ulrich Müller 2025-06-08 20:38 Ulrich Müller 2025-06-08 20:38 Ulrich Müller 2025-06-08 20:38 Ulrich Müller 2025-06-08 20:38 Ulrich Müller 2025-05-25 16:46 Ulrich Müller 2025-05-25 16:46 Ulrich Müller 2025-05-25 16:46 Ulrich Müller 2025-05-25 16:46 Ulrich Müller 2025-05-25 16:46 Ulrich Müller 2025-05-25 16:46 Ulrich Müller 2025-05-25 16:46 Ulrich Müller 2025-05-25 16:46 Ulrich Müller 2025-05-25 16:46 Ulrich Müller 2025-05-25 16:46 Ulrich Müller 2025-05-25 16:46 Ulrich Müller 2025-05-25 16:46 Ulrich Müller 2025-05-25 16:46 Ulrich Müller 2025-05-25 16:45 [gentoo-commits] proj/pms:master " Ulrich Müller 2025-05-25 16:46 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2025-05-21 15:31 [gentoo-commits] proj/pms:master " Ulrich Müller 2025-05-25 16:46 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2025-02-09 20:38 Ulrich Müller 2025-02-09 20:38 Ulrich Müller 2025-01-18 10:18 Ulrich Müller 2025-01-18 10:18 Ulrich Müller 2025-01-18 10:18 Ulrich Müller 2025-01-18 10:18 Ulrich Müller 2025-01-18 10:18 Ulrich Müller 2025-01-18 10:18 Ulrich Müller 2025-01-18 10:18 Ulrich Müller 2025-01-18 10:18 Ulrich Müller 2025-01-18 10:18 Ulrich Müller 2025-01-18 10:18 [gentoo-commits] proj/pms:master " Ulrich Müller 2025-01-18 10:18 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2025-01-17 18:50 [gentoo-commits] proj/pms:master " Ulrich Müller 2025-01-18 10:18 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2025-01-13 17:25 Ulrich Müller 2025-01-13 17:25 Ulrich Müller 2025-01-13 17:25 Ulrich Müller 2025-01-13 17:25 Ulrich Müller 2025-01-13 17:25 Ulrich Müller 2025-01-13 17:25 Ulrich Müller 2025-01-13 17:25 Ulrich Müller 2025-01-13 17:25 Ulrich Müller 2025-01-13 17:22 [gentoo-commits] proj/pms:master " Ulrich Müller 2025-01-13 17:25 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2025-01-13 17:22 [gentoo-commits] proj/pms:master " Ulrich Müller 2025-01-13 17:25 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2025-01-12 20:14 Ulrich Müller 2025-01-12 20:14 Ulrich Müller 2025-01-12 20:14 Ulrich Müller 2025-01-12 20:14 Ulrich Müller 2025-01-12 20:14 Ulrich Müller 2025-01-12 20:14 Ulrich Müller 2025-01-12 20:14 Ulrich Müller 2025-01-10 9:56 Ulrich Müller 2025-01-10 9:56 Ulrich Müller 2025-01-10 9:56 Ulrich Müller 2025-01-10 9:56 Ulrich Müller 2025-01-10 9:56 Ulrich Müller 2025-01-09 17:37 [gentoo-commits] proj/pms:master " Ulrich Müller 2025-01-10 9:56 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2025-01-07 17:16 Ulrich Müller 2025-01-07 17:16 Ulrich Müller 2025-01-07 17:16 Ulrich Müller 2025-01-07 17:16 Ulrich Müller 2025-01-07 11:03 Ulrich Müller 2025-01-07 11:03 Ulrich Müller 2025-01-07 11:03 Ulrich Müller 2025-01-07 11:03 Ulrich Müller 2024-12-11 19:39 Ulrich Müller 2024-12-11 19:39 Ulrich Müller 2024-12-11 19:39 Ulrich Müller 2024-12-11 19:39 Ulrich Müller 2024-12-11 19:39 Ulrich Müller 2024-12-11 19:39 Ulrich Müller 2024-12-11 19:39 Ulrich Müller 2024-12-11 19:37 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-12-11 19:39 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-12-03 17:44 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-12-11 19:39 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-12-01 11:30 Ulrich Müller 2024-11-29 16:46 Ulrich Müller 2024-11-22 14:41 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-12-11 19:39 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-11-12 19:18 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-12-11 19:39 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-11-12 19:18 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-12-11 19:39 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-11-12 19:18 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-12-11 19:39 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-07-16 9:50 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-12-11 19:39 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-06-24 9:10 Ulrich Müller 2024-06-16 19:22 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-12-11 19:39 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-06-16 19:22 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-12-11 19:39 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-06-02 9:57 Ulrich Müller 2024-06-02 9:57 Ulrich Müller 2024-06-02 9:57 Ulrich Müller 2024-06-02 9:57 Ulrich Müller 2024-06-02 9:57 Ulrich Müller 2024-06-02 9:57 Ulrich Müller 2024-06-02 9:57 Ulrich Müller 2024-06-02 9:57 Ulrich Müller 2024-06-02 9:57 Ulrich Müller 2024-06-02 9:57 Ulrich Müller 2024-06-02 9:55 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-06-02 9:57 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-05-14 4:25 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-06-02 9:57 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-04-05 14:07 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-06-02 9:57 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-03-03 17:30 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-06-02 9:57 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-03-03 17:30 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-06-02 9:57 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-03-03 17:30 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-06-02 9:57 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-02-08 9:43 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-06-02 9:57 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2024-01-01 14:34 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-06-02 9:57 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2023-08-09 17:24 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-06-02 9:57 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2023-08-06 15:26 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-06-02 9:57 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2023-06-05 18:45 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-06-02 9:57 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2023-06-05 18:45 [gentoo-commits] proj/pms:master " Ulrich Müller 2024-06-02 9:57 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2023-04-14 16:40 Ulrich Müller 2023-04-14 16:40 Ulrich Müller 2023-04-14 16:40 Ulrich Müller 2023-04-14 16:40 Ulrich Müller 2023-04-10 7:18 Ulrich Müller 2023-04-10 7:18 Ulrich Müller 2023-04-10 7:18 Ulrich Müller 2023-04-10 7:18 Ulrich Müller 2023-04-10 7:18 Ulrich Müller 2023-04-10 7:18 Ulrich Müller 2023-02-27 11:05 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-02-26 17:42 Ulrich Müller 2023-01-19 16:40 [gentoo-commits] proj/pms:master " Ulrich Müller 2023-02-26 17:42 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2023-01-19 16:40 [gentoo-commits] proj/pms:master " Ulrich Müller 2023-02-26 17:42 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2023-01-19 16:40 [gentoo-commits] proj/pms:master " Ulrich Müller 2023-02-26 17:42 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2023-01-09 18:18 [gentoo-commits] proj/pms:master " Ulrich Müller 2023-02-26 17:42 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2023-01-01 17:57 [gentoo-commits] proj/pms:master " Ulrich Müller 2023-02-26 17:42 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2023-01-01 17:57 [gentoo-commits] proj/pms:master " Ulrich Müller 2023-02-26 17:42 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2022-12-17 16:40 [gentoo-commits] proj/pms:master " Ulrich Müller 2023-02-26 17:42 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2022-12-14 10:10 Ulrich Müller 2022-12-14 10:10 Ulrich Müller 2022-12-09 19:07 [gentoo-commits] proj/pms:master " Ulrich Müller 2023-02-26 17:42 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2022-10-20 7:06 [gentoo-commits] proj/pms:master " Ulrich Müller 2023-02-26 17:42 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2022-08-22 18:30 Ulrich Müller 2022-08-22 18:30 Ulrich Müller 2022-08-22 18:30 Ulrich Müller 2022-08-22 18:30 Ulrich Müller 2022-08-22 18:30 Ulrich Müller 2022-08-21 9:42 Ulrich Müller 2022-08-21 9:42 Ulrich Müller 2022-08-21 9:42 Ulrich Müller 2022-08-21 9:42 Ulrich Müller 2022-08-21 9:42 Ulrich Müller 2022-08-21 9:42 Ulrich Müller 2022-08-18 15:53 Ulrich Müller 2022-08-18 15:53 Ulrich Müller 2022-08-18 15:53 Ulrich Müller 2022-08-18 15:53 Ulrich Müller 2022-08-18 15:53 Ulrich Müller 2022-08-18 15:53 Ulrich Müller 2022-08-18 15:53 Ulrich Müller 2022-08-18 15:53 Ulrich Müller 2022-08-18 15:53 Ulrich Müller 2022-04-07 6:22 [gentoo-commits] proj/pms:master " Ulrich Müller 2022-08-18 15:53 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2022-02-21 19:05 Ulrich Müller 2022-02-21 19:05 Ulrich Müller 2022-02-21 19:05 Ulrich Müller 2022-02-14 7:29 Ulrich Müller 2022-02-14 7:29 Ulrich Müller 2022-02-14 7:29 Ulrich Müller 2022-02-14 7:29 Ulrich Müller 2022-02-14 7:29 Ulrich Müller 2022-02-14 7:29 Ulrich Müller 2022-02-14 7:29 Ulrich Müller 2022-02-14 7:29 Ulrich Müller 2022-02-14 7:29 Ulrich Müller 2022-02-14 7:29 Ulrich Müller 2022-02-14 7:29 Ulrich Müller 2022-02-07 8:13 [gentoo-commits] proj/pms:master " Ulrich Müller 2022-02-14 7:29 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2022-02-07 8:13 [gentoo-commits] proj/pms:master " Ulrich Müller 2022-02-14 7:29 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2021-09-03 15:26 [gentoo-commits] proj/pms:master " Ulrich Müller 2022-02-14 7:29 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2021-09-03 15:26 [gentoo-commits] proj/pms:master " Ulrich Müller 2022-02-14 7:29 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2021-09-03 6:56 [gentoo-commits] proj/pms:master " Ulrich Müller 2022-02-14 7:29 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2021-09-01 17:35 [gentoo-commits] proj/pms:master " Ulrich Müller 2022-02-14 7:29 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller 2021-08-19 19:40 [gentoo-commits] proj/pms:master " Ulrich Müller 2022-02-14 7:29 ` [gentoo-commits] proj/pms:eapi-9 " Ulrich Müller
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=1703423152.aecb51e70f8546fd7f55144f9035ca982ab6fae1.ulm@gentoo \ --to=ulm@gentoo.org \ --cc=gentoo-commits@lists.gentoo.org \ --cc=gentoo-dev@lists.gentoo.org \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: linkBe sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox