Header file for sandbox.c.
More...
#include "orconfig.h"
#include "lib/cc/torint.h"
Go to the source code of this file.
Header file for sandbox.c.
Definition in file sandbox.h.
◆ sandbox_intern_string
#define sandbox_intern_string |
( |
|
s | ) |
(s) |
◆ SYS_SECCOMP
Used by SIGSYS signal handler to check if the signal was issued due to a seccomp2 filter violation.
Definition at line 24 of file sandbox.h.
◆ sandbox_cfg_t
Typedef to structure used to manage a sandbox configuration.
Definition at line 1 of file sandbox.h.
◆ sandbox_cfg_allow_open_filename()
int sandbox_cfg_allow_open_filename |
( |
sandbox_cfg_t ** |
cfg, |
|
|
char * |
file |
|
) |
| |
Function used to add a open allowed filename to a supplied configuration. The (char*) specifies the path to the allowed file; we take ownership of the pointer.
Definition at line 1904 of file sandbox.c.
◆ sandbox_cfg_allow_openat_filename()
int sandbox_cfg_allow_openat_filename |
( |
sandbox_cfg_t ** |
cfg, |
|
|
char * |
file |
|
) |
| |
Function used to add a openat allowed filename to a supplied configuration. The (char*) specifies the path to the allowed file; we steal the pointer to that file.
Definition at line 1911 of file sandbox.c.
◆ sandbox_cfg_allow_opendir_dirname()
int sandbox_cfg_allow_opendir_dirname |
( |
sandbox_cfg_t ** |
cfg, |
|
|
char * |
dir |
|
) |
| |
Function used to add a opendir allowed filename to a supplied configuration. The (char*) specifies the path to the allowed dir; we steal the pointer to that dir.
Definition at line 1918 of file sandbox.c.
◆ sandbox_cfg_allow_stat_filename()
int sandbox_cfg_allow_stat_filename |
( |
sandbox_cfg_t ** |
cfg, |
|
|
char * |
file |
|
) |
| |
Function used to add a stat/stat64 allowed filename to a configuration. The (char*) specifies the path to the allowed file; that pointer is stolen.
Definition at line 1925 of file sandbox.c.
◆ sandbox_cfg_new()
Creates an empty sandbox configuration file.
Definition at line 1874 of file sandbox.c.
◆ sandbox_init()
Function used to initialise a sandbox configuration.
Definition at line 1880 of file sandbox.c.
◆ sandbox_is_active()
int sandbox_is_active |
( |
void |
| ) |
|