New branch 'private/mmeeks/sandbox' available with the following commits:
commit 16306492b8b584fc5f5ec835b6a91dd11259c59c
Author: Szymon Kłos <[email protected]>
Date: Wed Nov 29 14:00:32 2023 +0100
sal: osl::File allow to create files in sandbox
"realpath" returns NULL for path which doesn't exist.
Allow usage of non-existing paths if parent is allowed.
This allows to successfully start the sandboxed kit.
osl_setAllowedPaths will allow now to use:
/foo/bar/nonexisting - previously it was ignored, is needed for LOK
but /foo/bar/nonexisting/newlevel - still cannot be used
isForbidden now checks parents of non-existing dir and assumes
the same permissions, if parent doesn't exist - it tries with
parent of parent, etc ...
Change-Id: I1052747ca284d2f81dfd5c5fbf893936e7426220
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/160111
Tested-by: Jenkins CollaboraOffice <[email protected]>
Reviewed-by: Michael Meeks <[email protected]>
commit 8381590b8ba86dcaf9e9c27574b85df7d53b5198
Author: Szymon Kłos <[email protected]>
Date: Thu Nov 30 15:36:57 2023 +0100
lok: import Work path from LOK_WORKDIR
Change-Id: If0c9727f53c1c4dfb78d1ccbd6b3ff602268bbf7
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/160156
Reviewed-by: Michael Meeks <[email protected]>
Tested-by: Jenkins CollaboraOffice <[email protected]>
commit 921bb9f237eb1dfa9b5dc4add7502ec463b9d934
Author: Michael Meeks <[email protected]>
Date: Sat Nov 25 21:24:49 2023 +0000
lok: import allowed paths from the SAL_ALLOWED_PATHS.
Do this on second init, in order to be able to reset this for
each child kit process.
Change-Id: I6939ea3677ea2b84c8944b63a9a9120e880a6bfa
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/159961
Tested-by: Jenkins CollaboraOffice <[email protected]>
Reviewed-by: Szymon Kłos <[email protected]>
commit 615c8b01f03b60c0a58bf3484b81083509bcbcc4
Author: Michael Meeks <[email protected]>
Date: Wed Nov 22 19:37:38 2023 +0000
sal: initial osl::File sand-boxing commit for Unix.
Change-Id: If2c106fef9640499b82b5cf350cb5169beb219fb
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/159838
Reviewed-by: Szymon Kłos <[email protected]>
Tested-by: Jenkins CollaboraOffice <[email protected]>
Reviewed-by: Michael Meeks <[email protected]>
