Menu

Summary of changes

Bogdan Drozdowski

2022-12-13
* LibNetBlock version 1.7
Significant portability updates. LibNetBlock now compiles on FreeBSD
and macOS. Intercepting new functions and improvements in the old.
Improvements in banning. Code quality improvements, including fixes
recommended by Codacy. Improvements in the build system. Significant
improvements in the documentation. New unit tests. Other changes.

2021-01-10
* LibNetBlock version 1.4
Portability improvements. LibNetBlock should work better with some
filesystems which have i-node numbers greater than 2^32-1 and compile
under non-ANSI-C. Checked running LibNetBlock under GCC address &
undefined behaviour sanitizers. Improvements in unit tests.

2019-02-08
* LibNetBlock version 1.3
Added intercepting new functions. Fixed initialization code - fixed
lookup for fopen(). Improvements in unit tests. Improvements in code
portability and compatibility. Better code maintainability, updated
copyright and documentation.

2017-04-23
* LibNetBlock version 1.0
Fixes and improvements to code related with banning the library from
interfering with fragile programs. Many code improvements and
simplifications in readability and maintenance. More unit tests.
Small performance improvements.

2015-09-06
* LibNetBlock version 0.6
Library marked as not requiring executable stack (security reasons).
Fixed runtime dependencies. Fixed banning functions. Fixed errno
setting. Minor code cleanup. Added unit tests.

2013-06-02
* LibNetBlock version 0.5
Portability improvements (fixes for compilation without some header
files or functions). Other small fixes and updates.

2012-09-30
* LibNetBlock version 0.4
Banning mechanism fixed and updated with new possibilities.

2012-02-11
* libnetblock version 0.3
Made the header file SWIG-enabled, updated copyright, code cleanup,
efficiency corrected, more forbidden programs, documentation update.

2011-10-07
* libnetblock version 0.2
Added a file for pkg-config with library information. Verified that
no symbol whose name can't be randomized can be reached from the
outside.

2011-06-16
* libnetblock version 0.1
Initial version. Intercepting: socket, sendmsg+recvmsg,
execve (thus the whole exec* family) with the system function (can
be used to launch bad programs), bind, a bunch of file opening
functions (fopen, fopen64, open, open64, freopen, freopen64,
openat, openat64) which can be used to access files under /dev/net,
some of the function from the libpcap library, to prevent raw
opening of network devices. Implemented program banning. Providing
a public interface to use by programmers to secure their programs.


Related

Wiki: Home