snac2/sandbox.c, branch master Fork of snac2 to test neighborhood #web https://git.r.bdr.sh/snac2/atom/sandbox.c?h=master 2026-02-05T20:17:44Z strip_exif support for the OpenBSD sandbox 2026-02-05T20:17:44Z Alvar Penning post@0x21.biz 2026-02-05T19:58:25Z urn:sha1:ea81780895702b08b0b93ff48bd1876330632b89 Change the strip_exif logic to work with the already existing OpenBSD sandbox and allow ffmpeg and mogrify to be executed. The previous strip_exif implementation relied on system(3), effectively starting "/bin/sh" and executing the required tool within a shell session. Making this work in the sandbox would require to allow executing "/bin/sh", rendering the sandbox useless. Thus, the code now starts determining the absolute path of the tools - unless they are given as ffmpeg_path or mogrify_path - and allowing them to be executed via unveil(2). Then, instead of the system(3) call, the good old fork(2) and execve(2) dance is performed. The sbox_enter code was made aware of strip_exif, which resulted in a pledge(2) violation before when disable_email_notifications was set to false. Furthermore, the detected paths of the tools are now allowed. Minor tweak. 2025-06-04T04:38:44Z grunfink grunfink@comam.es 2025-06-04T04:38:44Z urn:sha1:f0509f8b2b8df704226a94e9af8c06c3065234d4 Don't enable unveil() and pledge() for sendmail spawn if "smtp_url" is set. 2025-06-04T04:35:39Z grunfink grunfink@comam.es 2025-06-04T04:35:39Z urn:sha1:c2cac572e9e51fc91296e0aa86ed3e165a75dd2d Fixed regression while sending email via pipe on OpenBSD. 2025-06-03T01:31:31Z grunfink grunfink@comam.es 2025-06-03T01:31:31Z urn:sha1:89c1a4a94b1032aed3af293c0f04d7a8f058ccda allow sandbox to work with changed config values 2025-04-29T21:42:34Z shtrophic christoph@liebender.dev 2025-04-29T21:31:04Z urn:sha1:b7320f580d5cc83a120eb5eff720bfb9331dace3 Merge remote-tracking branch 'upstream/master' into curl-smtp 2025-01-24T19:38:26Z shtrophic christoph@liebender.dev 2025-01-24T19:38:26Z urn:sha1:85be7f36e12507cff7607df22ca14f8bfc00f6e2 Sandbox fixes 2025-01-23T19:15:23Z shtrophic christoph@liebender.dev 2025-01-23T19:15:23Z urn:sha1:cc1d4258e5dea493605c3f09b8279e28dd61e727 - allow reading `/dev/urandom` as it is shown as a failed syscall when tracing - resolve `/etc/ssl/cert.pem` in case it is a symlink add port parsing for sandboxing 2025-01-20T21:59:30Z shtrophic christoph@liebender.dev 2025-01-20T21:59:30Z urn:sha1:4c1a2d24d374d00c656c4489db7d28f80d64f9dc Don't fail Linux sandboxing if /usr/sbin/sendmail does not exist. 2025-01-06T14:35:18Z default nobody@localhost 2025-01-06T14:35:18Z urn:sha1:51f3f49ba0587311306eeca458a2dc67a12a2d49 Minor rework to sandbox code. 2025-01-06T14:22:13Z default nobody@localhost 2025-01-06T14:22:13Z urn:sha1:f1295a471fcf2ff351de3001e92c6190c5f7439e