diff options
Diffstat (limited to 'lua_scripts')
| -rw-r--r-- | lua_scripts/mapping.lua | 7 | ||||
| -rw-r--r-- | lua_scripts/pathmaps/devel/00_default.lua | 8 |
2 files changed, 13 insertions, 2 deletions
diff --git a/lua_scripts/mapping.lua b/lua_scripts/mapping.lua index b70c632..629bbaf 100644 --- a/lua_scripts/mapping.lua +++ b/lua_scripts/mapping.lua @@ -339,6 +339,13 @@ function sbox_execute_conditional_actions(binary_name, return sbox_execute_rule(binary_name, func_name, rp, path, rule_cand) end + elseif (rule_cand.if_redirect_ignore_is_active) then + if (sb.test_redirect_ignore( + rule_cand.if_redirect_ignore_is_active)) then + + return sbox_execute_rule(binary_name, + func_name, rp, path, rule_cand) + end else -- there MUST BE unconditional actions: if (rule_cand.use_orig_path diff --git a/lua_scripts/pathmaps/devel/00_default.lua b/lua_scripts/pathmaps/devel/00_default.lua index 09daadf..ceb7b2a 100644 --- a/lua_scripts/pathmaps/devel/00_default.lua +++ b/lua_scripts/pathmaps/devel/00_default.lua @@ -123,12 +123,16 @@ perl_lib_test = { } perl_bin_test = { + { if_redirect_ignore_is_active = "/usr/bin/perl", + map_to = target_root, readonly = true }, { if_active_exec_policy_is = "Rootstrap", map_to = target_root, readonly = true }, { map_to = tools, readonly = true } } python_bin_test = { + { if_redirect_ignore_is_active = "/usr/bin/python", + map_to = target_root, readonly = true }, { if_active_exec_policy_is = "Rootstrap", map_to = target_root, readonly = true }, { map_to = tools, readonly = true } @@ -327,8 +331,8 @@ devel_mode_rules_usr_bin = { readonly = true}, -- 19. perl & python: - -- processing depends on the - -- name of the current mapping mode. + -- processing depends on SBOX_REDIRECT_IGNORE and + -- name of the current mapping mode. -- (these are real prefixes, version number may -- be included in the name (/usr/bin/python2.5 etc)) {prefix = "/usr/bin/perl", actions = perl_bin_test}, |