Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies #134

Merged
merged 3 commits into from
Sep 8, 2024
Merged

Update dependencies #134

merged 3 commits into from
Sep 8, 2024

Conversation

kpcyrd
Copy link
Owner

@kpcyrd kpcyrd commented Sep 5, 2024

Updates uzers to 0.12

I'm slightly hesitant because it's very difficult to figure out if there are any new syscalls that need to be allow-listed, feedback/testing very welcome. :)

cc: @nc7s

@nc7s
Copy link
Contributor

nc7s commented Sep 5, 2024

Do you mean like, syscalls(2) syscalls? Then I'm not even sure where to start looking. Mind giving some pointers?

@kpcyrd
Copy link
Owner Author

kpcyrd commented Sep 5, 2024

Yes. :) This project implements sandboxing with (among other things) seccomp:

https://github.com/kpcyrd/sniffglue/blob/main/src/sandbox/seccomp.rs

The current filter was built with trial and error over time, but any change in the following may introduce use of a new syscall (because this is (rightfully) not considered semver breaking):

  • a more recent Rust compiler/standard library
  • a change in gnu libc
  • a change in libpcap
  • a change in one of the depending crates

I'm not asking you to do this work, I'm doing some testing right now myself, I'm about to ping a friend on irc who's very interested in arm, and in case nobody reports any issues I'm planning to merge and release this. :)

@kpcyrd kpcyrd merged commit d36e092 into main Sep 8, 2024
4 checks passed
@kpcyrd kpcyrd deleted the update branch September 8, 2024 15:13
@kpcyrd
Copy link
Owner Author

kpcyrd commented Sep 8, 2024

@nc7s I've uploaded tls-parser 0.12.1 to Debian, after that upload went through I can upload the new sniffglue version.

@nc7s
Copy link
Contributor

nc7s commented Sep 9, 2024

Thanks! plugwash uploaded sniffglue already so we can wait for buildds to settle it down :>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants