strepsirrhini/libreoffice-online
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1
libreoffice-online/common/Seccomp.hpp

26 lines
751 B
C++
Raw Normal View History

Initial seccomp work. Add a list of unhelpful looking system calls to improve containment. Change-Id: I2e4bf3e0a6a752d427299728663d17120586bb10
2017-04-28 05:02:06 -05:00
/* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
/*
* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
*/
Use #pragma once LibreOffice core uses that, too, and we support an even more restricted set of compilers. Change-Id: I0d0e2c8608e323eb5ef0f35ee8c46d02ab49a745 Reviewed-on: https://gerrit.libreoffice.org/c/online/+/92467 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Tor Lillqvist <tml@collabora.com>
2020-04-18 03:39:50 -05:00
#pragma once
Initial seccomp work. Add a list of unhelpful looking system calls to improve containment. Change-Id: I2e4bf3e0a6a752d427299728663d17120586bb10
2017-04-28 05:02:06 -05:00
Rework LOOLProtocol::tokenize() to return a StringVector object The bulk of this commit just changes std::vector<std::string> to StringVector when we deal with tokens from a websocket message. The less boring part of it is the new StringVector class, which is a wrapper around std::vector<std::string>, and provides the same API, except that operator[] returns a string, not a string&, and this allows returning an empty string in case that prevents reading past the end of the underlying array. This means in case client code forgets to check size() before invoking operator[], we don't crash. (See the ~3 previous commits which fixed such crashes.) Later the ctor could be changed to take a single underlying string to avoid lots of tiny allocations, that's not yet done in this commit. Change-Id: I8a6082143a8ac0b65824f574b32104d7889c184f Reviewed-on: https://gerrit.libreoffice.org/c/online/+/89687 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
2020-02-28 03:50:58 -06:00
#include <Protocol.hpp>
wsd: always use signal-safe calls The async-signal-safe functions to get thread-id and thread-name, which cache the results, are faster, cleaner, and signal-safe. No reason why we shouldn't always use them. Especially since it appears the logic was inverted in Log::prefix, such that the signal un-safe calls were made during signal-handling, and the safe ones were called otherwise! Instead of passing the signal-safe flag to Log::prefix, we pass the buffer size, for improved security. Furthermore, reduce header dependencies and reduce clutter. Change-Id: I697689b2f0a290b6d8cce4babc3ac1e576141da6
2018-06-04 15:47:39 -05:00
Initial seccomp work. Add a list of unhelpful looking system calls to improve containment. Change-Id: I2e4bf3e0a6a752d427299728663d17120586bb10
2017-04-28 05:02:06 -05:00
namespace Seccomp {
enum Type { KIT, WSD };
/// Lock-down a process hard - @returns true on success.
bool lockdown(Type type);
configure option to disable SECCOMP Change-Id: I8120674b60d388a3f85190631469a112c4af9266 Reviewed-on: https://gerrit.libreoffice.org/39408 Reviewed-by: Michael Meeks <michael.meeks@collabora.com> Tested-by: Michael Meeks <michael.meeks@collabora.com>
2017-06-30 05:10:38 -05:00
};
wsd: support setting process rlimits Change-Id: I7117e6843d2ebc919d7d2303cc593de888cc54b1 Reviewed-on: https://gerrit.libreoffice.org/38672 Reviewed-by: Ashod Nakashian <ashnakash@gmail.com> Tested-by: Ashod Nakashian <ashnakash@gmail.com>
2017-06-10 19:41:30 -05:00
configure option to disable SECCOMP Change-Id: I8120674b60d388a3f85190631469a112c4af9266 Reviewed-on: https://gerrit.libreoffice.org/39408 Reviewed-by: Michael Meeks <michael.meeks@collabora.com> Tested-by: Michael Meeks <michael.meeks@collabora.com>
2017-06-30 05:10:38 -05:00
namespace Rlimit {
wsd: support setting process rlimits Change-Id: I7117e6843d2ebc919d7d2303cc593de888cc54b1 Reviewed-on: https://gerrit.libreoffice.org/38672 Reviewed-by: Ashod Nakashian <ashnakash@gmail.com> Tested-by: Ashod Nakashian <ashnakash@gmail.com>
2017-06-10 19:41:30 -05:00
/// Handles setconfig command with limit_... subcommands.
/// Returns true iff it handled the command, regardless of success/failure.
Rework LOOLProtocol::tokenize() to return a StringVector object The bulk of this commit just changes std::vector<std::string> to StringVector when we deal with tokens from a websocket message. The less boring part of it is the new StringVector class, which is a wrapper around std::vector<std::string>, and provides the same API, except that operator[] returns a string, not a string&, and this allows returning an empty string in case that prevents reading past the end of the underlying array. This means in case client code forgets to check size() before invoking operator[], we don't crash. (See the ~3 previous commits which fixed such crashes.) Later the ctor could be changed to take a single underlying string to avoid lots of tiny allocations, that's not yet done in this commit. Change-Id: I8a6082143a8ac0b65824f574b32104d7889c184f Reviewed-on: https://gerrit.libreoffice.org/c/online/+/89687 Tested-by: Jenkins CollaboraOffice <jenkinscollaboraoffice@gmail.com> Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
2020-02-28 03:50:58 -06:00
bool handleSetrlimitCommand(const StringVector& tokens);
Initial seccomp work. Add a list of unhelpful looking system calls to improve containment. Change-Id: I2e4bf3e0a6a752d427299728663d17120586bb10
2017-04-28 05:02:06 -05:00
};
/* vim:set shiftwidth=4 softtabstop=4 expandtab: */
Reference in a new issue Copy permalink