Peter Müller 0b6a2e761b Tor: Enable syscall sandbox ...

This makes post-exploitation activities harder, in case the local Tor
instance has been compromised. It is worth noticing that Tor won't
respond to a "GETINFO address" command on the control port if sandboxed,
but our CGI does not make use of it, and neither is any legitimate
service on IPFire doing so.

Tested on a small middle relay running on an IPFire machine.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Arne Fitzenreiter <arne_f@ipfire.org>

2021-10-22 10:20:37 +00:00

..

captive

captive: Show access page in browser language

2017-09-22 19:00:04 +01:00

logs.cgi

firewalllog.dat: Proper display protocol names.

2021-09-02 09:21:16 +00:00

aliases.cgi

aliases.cgi: Use new system methods

2021-06-10 14:30:51 +01:00

atm-status.cgi

Hardcode theme to ipfire

2021-04-08 10:11:34 +00:00

backup.cgi

backup.cgi: Use new system methods

2021-06-10 14:30:51 +01:00

captive.cgi

captive.cgi: Use new system methods

2021-06-10 14:30:51 +01:00

chpasswd.cgi

{proxy,chpasswd}.cgi: Fix a remote code execution vulnerability

2016-04-08 15:54:53 +01:00

connections.cgi

connections.cgi: Use new system methods

2021-06-10 14:30:54 +01:00

connscheduler.cgi

Hardcode theme to ipfire

2021-04-08 10:11:34 +00:00

country.cgi

country.cgi: Fix for copy&paste typo

2021-02-15 13:13:54 +00:00

credits.cgi

update-contributors

2021-09-12 09:42:47 +00:00

ddns.cgi

ddns.cgi: Fix sanity check logic.

2021-07-07 09:34:31 +00:00

dhcp.cgi

dhcp.cgi: Fix typo and displaying advanced options syntax.

2021-06-17 20:11:37 +00:00

dns.cgi

dns.cgi: Use new system commands

2021-06-10 14:30:52 +01:00

dnsforward.cgi

dnsforward.cgi: Use new system methods

2021-06-10 14:30:52 +01:00

entropy.cgi

rrd graphs: Fix indentation after removing graph output

2021-09-05 08:32:17 +00:00

extrahd.cgi

extrahd.cgi: Use new system methods

2021-06-10 14:30:54 +01:00

fireinfo.cgi

fireinfo.cgi: Fix kernel version

2021-07-09 12:56:17 +00:00

firewall.cgi

firewall.cgi: Bring back check for single IP when using DNAT.

2021-09-05 08:41:12 +00:00

fwhosts.cgi

fwhosts.cgi: properly fetch configured IPsec N2N subnets

2021-08-09 07:50:57 +00:00

getrrdimage.cgi

getrrdimage.cgi: Fix supported origins list

2021-09-12 09:34:08 +00:00

gpl.cgi

gpl.cgi: Grab and GPLv3 license in pure perl.

2021-06-10 14:30:56 +01:00

guardian.cgi

guardian: Use new system methods

2021-06-10 14:30:53 +01:00

gui.cgi

gui.cgi: Use new system methods

2021-06-10 14:30:53 +01:00

hardwaregraphs.cgi

rrd graphs: Fix indentation after removing graph output

2021-09-05 08:32:17 +00:00

hosts.cgi

hosts.cgi: Use new system methods

2021-06-10 14:30:53 +01:00

ids.cgi

Hardcode theme to ipfire

2021-04-08 10:11:34 +00:00

index.cgi

index.cgi: Remove left-over DNSSEC status warning

2021-10-19 11:24:07 +00:00

ipinfo.cgi

Hardcode theme to ipfire

2021-04-08 10:11:34 +00:00

iptables.cgi

misc-progs: getipstat: Refactor + extend

2021-05-04 14:27:27 +00:00

location-block.cgi

Hardcode theme to ipfire

2021-04-08 10:11:34 +00:00

mac.cgi

mac.cgi: Use new system methods

2021-06-10 14:30:54 +01:00

mail.cgi

Hardcode theme to ipfire

2021-04-08 10:11:34 +00:00

mdstat.cgi

mdstat.cgi: Print mdstat status in pure perl

2021-06-17 20:11:37 +00:00

media.cgi

media.cgi: Fix parsing output of iostat

2021-09-29 07:34:05 +00:00

memory.cgi

rrd graphs: Fix indentation after removing graph output

2021-09-05 08:32:17 +00:00

modem-status.cgi

modem-status: add more ttyUSB and ttyACM ports.

2014-06-06 10:45:59 +02:00

modem.cgi

modem.cgi: Use new perl system functions

2021-06-10 14:32:44 +01:00

mpfire.cgi

mpfire.cgi: Use new perl system functions

2021-06-10 14:33:57 +01:00

netexternal.cgi

rrd graphs: Fix indentation after removing graph output

2021-09-05 08:32:17 +00:00

netinternal.cgi

rrd graphs: Fix indentation after removing graph output

2021-09-05 08:32:17 +00:00

netother.cgi

rrd graphs: Fix indentation after removing graph output

2021-09-05 08:32:17 +00:00

netovpnrw.cgi

rrd graphs: Fix indentation after removing graph output

2021-09-05 08:32:17 +00:00

netovpnsrv.cgi

rrd graphs: Fix indentation after removing graph output

2021-09-05 08:32:17 +00:00

optionsfw.cgi

optionsfw.cgi: Use new perl system functions

2021-06-10 14:35:09 +01:00

ovpnmain.cgi

ovpnmain.cgi: Remove unnecessary check/error message

2021-09-12 09:29:15 +00:00

p2p-block.cgi

Hardcode theme to ipfire

2021-04-08 10:11:34 +00:00

pakfire.cgi

pakfire.cgi: Implement logic to lock the page until pakfire has been fully launched.

2021-10-19 18:34:06 +00:00

pppsetup.cgi

Update language files: fix for Bug 12671 - remove evil spirits - demon vs daemon

2021-09-12 09:34:47 +00:00

proxy.cgi

proxy.cgi: Remove option to show Squid's version entirely

2021-10-13 12:17:55 +00:00

qos.cgi

Bought a 'd' - fixed an old typo

2021-10-13 12:22:49 +00:00

remote.cgi

remote.cgi: Fix splitting output from ssh-keygen.

2021-06-17 20:11:37 +00:00

routing.cgi

routing.cgi: Use new perl system functions

2021-06-10 14:46:29 +01:00

samba.cgi

samba.cgi: Use new perl system functions

2021-06-10 14:54:52 +01:00

services.cgi

services.cgi: Redesign isautorun() because shell globbing cannot used anymore.

2021-06-17 20:11:37 +00:00

shutdown.cgi

shutdown.cgi: Add "reboot with filesystem check" button

2021-09-02 09:11:50 +00:00

speed.cgi

speed.cgi: Add requirement for general-functions.pl.

2021-06-20 12:37:33 +00:00

system.cgi

rrd graphs: Fix indentation after removing graph output

2021-09-05 08:32:17 +00:00

time.cgi

time.cgi: Get and manipuate date and time in pure perl

2021-06-17 20:11:37 +00:00

tor.cgi

Tor: Enable syscall sandbox

2021-10-22 10:20:37 +00:00

traffic.cgi

traffic.cgi: Use new perl system functions

2021-06-10 15:05:05 +01:00

updatexlrator.cgi

updatexlrator.cgi: Fix max disk usage input size

2021-09-12 09:36:33 +00:00

urlfilter.cgi

urlfilter.cgi: Use new perl system functions

2021-06-10 15:23:06 +01:00

vpnmain.cgi

vpnmain.cgi: Do not interpret $? as error code of move()

2021-09-10 16:57:06 +00:00

vulnerabilities.cgi

Hardcode theme to ipfire

2021-04-08 10:11:34 +00:00

wakeonlan.cgi

wakeonlan.cgi: Use new perl system functions

2021-06-10 15:24:29 +01:00

webaccess.cgi

webaccess.cgi: Use new perl system functions

2021-06-10 15:25:02 +01:00

wireless.cgi

wireless.cgi: Use new system methods

2021-06-17 20:10:24 +00:00

wirelessclient.cgi

wirelessclient.cgi: Use new perl system functions

2021-06-10 15:26:19 +01:00

wlanap.cgi

wlanap.cgi: fix typo at reading country list

2021-09-24 09:31:52 +00:00

zoneconf.cgi

Drop support for macvtap

2021-04-08 10:19:55 +00:00