platform_external_selinux/policycoreutils/sandbox
Eric Paris 31edb319af policycoreutils: sandbox: rewrite /tmp handling
seunshare now creates a runtime temporary directory owned by root and
with the sticky bit set properly.  Files from the user-specified directory
are copied to the runtime directory and the changes synced back (using rsync)
at the end of the seunshare run.

This is hoped to address CVE-2011-1011

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
2011-09-16 11:53:46 -04:00
..
.gitignore Repo: update .gitignore 2011-08-02 13:31:51 -04:00
Makefile policycoreutils: sandbox: add sandbox cgroup support 2011-09-15 19:20:44 -04:00
sandbox policycoreutils: sandbox: rewrite /tmp handling 2011-09-16 11:53:46 -04:00
sandbox.8 policycoreutils: sandbox: add sandbox cgroup support 2011-09-15 19:20:44 -04:00
sandbox.conf policycoreutils: sandbox: Makefile: new man pages 2011-08-26 14:28:14 -04:00
sandbox.conf.5 policycoreutils: sandbox: Makefile: new man pages 2011-08-26 14:28:14 -04:00
sandbox.config Author: Daniel J Walsh 2010-06-10 16:35:55 -04:00
sandbox.init Author: Steve Lawrence 2010-06-10 16:37:59 -04:00
sandboxX.sh policycoreutils: sandbox: trap sigterm to make sure sandbox exits with the proper exit code 2011-08-26 14:31:55 -04:00
seunshare.8 policycoreutils: sandbox: rewrite /tmp handling 2011-09-16 11:53:46 -04:00
seunshare.c policycoreutils: sandbox: rewrite /tmp handling 2011-09-16 11:53:46 -04:00
start policycoreutils: sandbox: Makefile: new man pages 2011-08-26 14:28:14 -04:00
test_sandbox.py Author: Daniel J Walsh 2010-06-10 16:35:55 -04:00