1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
|
2010-04-02 Shachar Shemesh <thesun@users.sourceforge.net>
* [r73] Fix a one off buffer overrun: reported by Christian Jaeger
http://bugs.debian.org/576244
* Major cleanup of the build system. No point for SONAME of preload
only library. Record pkglibdir path in config.h rather than
specialized paths.h
* Install privbind into sbin rather than bin (only root can really run
it)
2007-06-16 Shachar Shemesh <thesun@users.sourceforge.net>
* [r72] configure.ac: Update version information to 1.1
2007-06-13 Shachar Shemesh <thesun@users.sourceforge.net>
* [r71] NEWS: Update the NEWS file to announce the release.
* [r70] README, privbind.1: Update the docs regarding bugs that
have been resolved
* [r69] libprivbind.c: Fix bug on fcntl returning EINTR.
2007-06-12 Shachar Shemesh <thesun@users.sourceforge.net>
* [r67] ChangeLog, authors: Update the changelog
* [r66] configure.ac: Update version number to 1.0
* [r65] privbind.1: Document the "-l" flag in the man page
2007-06-08 Shachar Shemesh <thesun@users.sourceforge.net>
* [r64] Makefile.am, configure.ac, main.c, test.c: Add multi
process and multi thread tests to "test"
Add a configure option "--enable-testing", for internal tests in
privbind
Add optional delay after each bind inside privbind (only if
--enable-testing was used)
2007-06-06 Shachar Shemesh <thesun@users.sourceforge.net>
* [r63] libprivbind.c: Implement mutex - not tested
2007-06-06 Amos Shapira <amosshapira@users.sourceforge.net>
* [r62] ipc.h, libprivbind.c, main.c: reverted the changes to use
mutex (r59) and to send number of calls left (r60)
after Shachar mentioned the problem of the application forking
and calling
bind(2) from both processes
* [r61] privbind.1: replace "root process" by "helper process".
this is the tail of such changes
I committed in previous checkin.
* [r60] ipc.h, libprivbind.c, main.c: the helper process sends the
number of calls left together with its reply, so
the privbind library can cleanly avoid sending more requests
* [r59] libprivbind.c: use a mutex to synchronize access to the
socket with the helper process
2007-06-05 Shachar Shemesh <thesun@users.sourceforge.net>
* [r58] privbind.1: Better wording of the last bug in the manual
Reinstate a "How it works" section which gives a short
description of what privbind does, and direct the user to the
README for more details.
* [r57] Makefile.am: Syntactic cleanup of Makefile.am
Install the README file during "make install"
2007-06-05 Amos Shapira <amosshapira@users.sourceforge.net>
* [r56] privbind.1: (hopefully) improved style, redeability and
length of manual page
* [r55] privbind.1: typo
2007-06-05 Nadav Har'el <nyh@users.sourceforge.net>
* [r54] privbind.1: spelling
2007-06-05 Shachar Shemesh <thesun@users.sourceforge.net>
* [r53] bootstrap: Reorder the operations in bootstrap so that they
actually bootstrap
* [r51] privbind.1: Update the "security considerations" section of
the man page
* [r50] ChangeLog, Makefile.am, configure.ac, libprivbind.c:
Prevent the program from closing our communication socket
Cleanup in auto-generation of "paths.h"
* [r49] ChangeLog, README, privbind.1: Documentation improvements.
Moved the "how it works" section from the man page to the README
2007-06-02 Shachar Shemesh <thesun@users.sourceforge.net>
* [r48] ChangeLog, libprivbind.c: Cleanups of libprivbind. Improve
the semantic behaviour.
* [r47] Makefile.am: Make sure that "make test" can be used with
different privbind and testbind parameters
* [r46] Makefile.am, configure.ac, main.c: Add "test" target that
tests privbind in place.
Added "test-su" and "test-sudo" to automatically elevate to root
for the test
* [r45] Makefile.am, test.c: Make the test file more flexible.
* [r44] ChangeLog, main.c, test.c: Switch the order of the
processes. Parent now runs the command, child handles the binds
* [r43] main.c: Code cleanup - split the parent and child code into
separate functions
* [r42] ChangeLog, Makefile.am, configure.ac, main.c, test.c:
Better build of "test" - remove some warnings, add to makefile
(and to "make dist").
Moved the preload library from */lib to */lib/privbind to reduce
shared directory clutter
2007-06-01 Amos Shapira <amosshapira@users.sourceforge.net>
* [r41] main.c: removed old '-d' option passed to getopts without
being handled by
main()
2007-06-01 Shachar Shemesh <thesun@users.sourceforge.net>
* [r39] bootstrap, configure.ac: Cleanup warnings on "bootstrap"
rerun
disable (by default) creation of static libraries
2007-05-24 Amos Shapira <amosshapira@users.sourceforge.net>
* [r38] bootstrap: made bootstrap an executable script
* [r37] README: s/low/reserved ports
2007-05-23 Nadav Har'el <nyh@users.sourceforge.net>
* [r36] README: Added a README
* [r35] main.c: Change usage line a bit
2007-05-22 Amos Shapira <amosshapira@users.sourceforge.net>
* [r34] main.c: more fixes to the assumption that gid 0 is illegal.
I leave uid==0 alone since I'm not sure it makes sense to use
this program
and keep uid 0.
* [r33] main.c: added missing help() function parameter type
fixed test for gid value legality - zero is also a legal value
* [r32] main.c: fix typo in fixed message
* [r31] main.c: improved help message text for -g default
2007-05-22 Shachar Shemesh <thesun@users.sourceforge.net>
* [r30] ChangeLog, Makefile.am, NEWS: Move the NEWS, which looked
like a changelog, to ChangeLog
Create a stub NEWS
Update Makefile.am so that make dist will work
2007-05-22 Nadav Har'el <nyh@users.sourceforge.net>
* [r29] NEWS:
* [r28] Makefile.am, privbind.1: Add manual page
2007-05-21 Nadav Har'el <nyh@users.sourceforge.net>
* [r27] main.c: Fix usage line to show that -g option is actually
optional, not mandatory.
* [r26] AUTHORS, NEWS, configure.ac, main.c, test.c: Some command
line and other changes (see NEWS)
* [r25] .: New trunk, a copy of Amos's branch.
2007-02-16 Amos Shapira <amosshapira@users.sourceforge.net>
* [r23] branches/amos/main.c, branches/amos/test.c: switch for
SOCK_SEQPACKET so the parent is notified when the child closed
the connection.
* [r22] branches/amos/main.c, branches/amos/test.c: some message
cleanup
send MSG_REP_NONE on MSG_REQ_NONE
exit(2) with the same exit value as the child
pay attention to the -n argument
TODO:
1. make '-g' non-mandatory - default to the user's default gid
from /etc/passwd
2. BUG - when privbind isn't root and the child exits on
privilege drop - the parent get blocked on recvmsg. Have to find
the right way to signal the parent to exit. (test: "./privbind -u
1000 -g 1000 -n 1 ./test" - from a regular user)
2007-02-15 Amos Shapira <amosshapira@users.sourceforge.net>
* [r21] branches/amos/libprivbind.c, branches/amos/main.c,
branches/amos/test.c: now passes back the bind result.
practically functioning.
* [r20] branches/amos, branches/amos/libprivbind.c,
branches/amos/main.c, branches/amos/test.c: test.c - added a
simple program which binds to TCP port 987 on local loopback
interface so we can test the library.
libprivbind.c - minor unimportant changes
main.c - added main loop which accepts requests from children and
execute them.
Still to complete returning of bind results in main.c
2006-12-05 Shachar Shemesh <thesun@users.sourceforge.net>
* [r19] ipc.h, libprivbind.c: Implement client side
2006-12-02 Shachar Shemesh <thesun@users.sourceforge.net>
* [r18] Makefile.am, libprivbind.c: Add debug outputs
Make sure "dlsym" links
* [r17] configure.ac: Fix typo in library name
* [r16] libprivbind.c, stub.h: A template "bind" override
* [r15] main.c: Add copyright notice to file
* [r14] configure.ac, main.c: Move the library name definition to
the configure script
* [r13] main.c: Add error message in case exec failed
Add a warning in case privbind is run as SUID
2006-12-01 Shachar Shemesh <thesun@users.sourceforge.net>
* [r12] Makefile.am, libprivbind.c, main.c: Add the preload library
to the makefiles
Add the priviledge drop
* [r11] ., bootstrap, configure.ac: Add libtool support
* [r10] main.c: Actually run child process
* [r9] configure.ac, main.c: Code for passing the fd to the child
* [r8] Makefile.am: Small cleanups
* [r7] main.c: Create a communication socket between the processes
* [r6] main.c: Allow non-numeric uids
* [r5] ., main.c: Perform argument parsing
2006-11-28 Shachar Shemesh <thesun@users.sourceforge.net>
* [r4] main.c: Argument processing
* [r3] ., README: Some more structure cleanup
* [r2] ., AUTHORS, COPYING, ChangeLog, INSTALL, Makefile.am, NEWS,
bootstrap, configure.ac, main.c: Basic project structure
* [r1] branches, tags, .: Create repository structure
|
