From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 41AEC59CA9 for ; Wed, 30 Mar 2016 05:22:08 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 9A8AC21C016; Wed, 30 Mar 2016 05:22:07 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 4AE3421C016 for ; Wed, 30 Mar 2016 05:22:07 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 476F4340B77 for ; Wed, 30 Mar 2016 05:22:06 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 1603785A for ; Wed, 30 Mar 2016 05:22:05 +0000 (UTC) From: "Mike Frysinger" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Mike Frysinger" Message-ID: <1459315041.31a135d261a9bc1d65b1fa484345a858bab84db8.vapier@gentoo> Subject: [gentoo-commits] proj/sandbox:master commit in: libsandbox/ X-VCS-Repository: proj/sandbox X-VCS-Files: libsandbox/libsandbox.c X-VCS-Directories: libsandbox/ X-VCS-Committer: vapier X-VCS-Committer-Name: Mike Frysinger X-VCS-Revision: 31a135d261a9bc1d65b1fa484345a858bab84db8 X-VCS-Branch: master Date: Wed, 30 Mar 2016 05:22:05 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: f19d18fa-e327-41b0-b2c7-ec2c3e9f4742 X-Archives-Hash: 3ac515b9325f03b6b0f9cbfd6f295fcb commit: 31a135d261a9bc1d65b1fa484345a858bab84db8 Author: Mike Frysinger gentoo org> AuthorDate: Wed Mar 30 05:17:21 2016 +0000 Commit: Mike Frysinger gentoo org> CommitDate: Wed Mar 30 05:17:21 2016 +0000 URL: https://gitweb.gentoo.org/proj/sandbox.git/commit/?id=31a135d2 libsandbox: whitelist execvpe URL: https://bugs.gentoo.org/578516 Reported-by: Toralf Förster gmx.de> Signed-off-by: Mike Frysinger gentoo.org> libsandbox/libsandbox.c | 1 + 1 file changed, 1 insertion(+) diff --git a/libsandbox/libsandbox.c b/libsandbox/libsandbox.c index cbe1aa1..e809308 100644 --- a/libsandbox/libsandbox.c +++ b/libsandbox/libsandbox.c @@ -710,6 +710,7 @@ static int check_access(sbcontext_t *sbcontext, int sb_nr, const char *func, sb_nr == SB_NR_EXECV || sb_nr == SB_NR_EXECVP || sb_nr == SB_NR_EXECVE || + sb_nr == SB_NR_EXECVPE || sb_nr == SB_NR_FEXECVE)) { retval = check_prefixes(sbcontext->read_prefixes,