subterfugue-announce Mailing List for SUBTERFUGUE
Status: Alpha
Brought to you by:
mkc
You can subscribe to this list here.
2000 |
Jan
|
Feb
(1) |
Mar
(4) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(2) |
Nov
|
Dec
|
---|---|---|---|---|---|---|---|---|---|---|---|---|
2001 |
Jan
|
Feb
(1) |
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2002 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
From: Mike C. <mkc...@ma...> - 2002-04-07 06:11:11
|
[You might be receiving a BCC of this due to having shown previous interest in SUBTERFUGUE.] [2002-04-06] Regrettably, the SUBTERFUGUE project has been nearly dormant for over a year now, with just minimal updates to catch up to Python 2.1 and fix a few bugs. It's become clear that I'm not going to have the time needed to properly maintain it and do the new development needed to turn it from an interesting (IMO) prototype to a reliable tool. Therefore, I'm writing this to announce that I'm looking for one or more people to take it over. If you're interested, or think you might be, please subscribe to subterfugue-dev and post a message indicating your interest (and maybe a bit about your skills and/or where you'd like to see SUBTERFUGUE go). I will gladly offer information, advice and a roadmap of what I believe are the most important things that need to be fixed or implemented, but the future direction of SUBTERFUGUE will be up to you who take it over. (If you're wondering, I've taken a job as a scientific programmer at a biomedical research facility, and learning bioinformatics and biology in general is taking up all of my time.) --Mike |
From: Mike C. <mk...@ma...> - 2001-02-21 12:37:36
|
SUBTERFUGUE 0.2 is available. It's been updated to work with the new 2.4 kernel and also includes a few other bug fixes and improvements. It's available in source or Debian package form. As always, feedback is welcome. --Mike ============================================================================== README: SUBTERFUGUE is a framework for observing and playing with the reality of software; it's a foundation for building tools to do tracing, sandboxing, and many other things. You could think of it as "strace meets expect." Here's a short (real) "screenshot" which hints at one of its possible uses: # sf --trick=SimplePathSandbox:"read=['/'];write=['/dev/tty']" bash # id uid=0(root) gid=0(root) groups=0(root) # rm -f /etc/passwd write deny (unlink): '/etc/passwd' rm: cannot unlink `/etc/passwd': Permission denied [Translation: Run 'bash' in a sandbox (restricted environment) so that it and all of the processes it creates can read all files (everything under '/') but can only write '/dev/tty'. All system calls that read or write to the filesystem are checked, and the attempt to unlink '/etc/passwd' is disallowed.] Disclaimer: SUBTERFUGUE is still fairly alpha. If you run it on a system that matters and something breaks, you get to keep both pieces. Especially avoid programs where a loss of state might be disastrous (e.g., fetchmail). See 'http://subterfugue.org' and the sf(1) man page for more info. See the file 'NEWS' in the distribution for info on the latest release. ============================================================================== NEWS: Version 0.2 ("tiger") * Fixes to make SUBTERFUGUE work again with the 2.4 kernel. (new system calls, slightly different wait behaviors, etc) * Added 'now' and 'delta' flags to TimeWarp trick. Experience the future and the past! * New 'herekitty' script to amuse your cat! (Dan Egnor's cool idea) * FixFlash trick fixes a problem with the Macromedia Flash plugin that causes Netscape to hang when Flash tries to use /dev/dsp and it's in use. * The TRACESYSGOOD patch is included in the kernel as of 2.4.0-test10, so revert to disabling the "wait channel hack" by default. (Only vanilla 2.3.99 through 2.4.0-test9 need it now.) * Added '--nowall', which allows sf to run somewhat in a degenerate way under linux 2.2. * Disable python '-O' flag by default, as it turns off assertion checking, which is still extremely useful at this point. |
From: Mike C. <mco...@kc...> - 2000-10-31 06:44:26
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This mini-release just fixes a bug that could allow processes to escape tracing under certain circumstances. If you plan to make use of 'sf', you should upgrade. - --Mike See http://subterfugue.org for info on SUBTERFUGUE. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (GNU/Linux) Comment: Processed by Mailcrypt 3.5.5 and Gnu Privacy Guard <http://www.gnupg.org/> iD8DBQE5/mo0HxpYi0vMj/QRAmE6AJ9N/V57LZ6qUzYdSOsiAihqACQIEgCfVm7h KShS58o2uzOWHyMUtUg5U9A= =YKmp -----END PGP SIGNATURE----- |
From: <mk...@us...> - 2000-10-30 10:52:58
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUBTERFUGUE 0.1.99 is available. It's been updated to work with the latest kernel (linux-2.4.0-test9), and there are new tricks, documentation, and a Debian package. (see below) As always, feedback is welcome. Have fun! - --Mike ============================================================================== NEWS: Version 0.1.99 ("superstar") * Added a fix to make SUBTERFUGUE work again with the latest 2.4 kernels. Made usage of the "wait channel hack" the default, for vanilla 2.4 users. * Added two new tricks, NetThrottle and TimeWarp, which you can see in action now at the bottom of the screenshots page (http://subterfugue.org/screenshot.html). NetThrottle, in particular, seems like it would be handy for everyday use. (TimeWarp is more of an amusement, though it might help you cheat at certain arcade games. :-) * Added a polished version of the SUBTERFUGUE motivation document to the web site (http://subterfugue.org/motivation.html). Comments welcome. It's pretty over-the-top. Does it sound like it was composed in a remote Montana cabin? :-0 * Added a man page for sf(1), based on Pavel Machek's original draft. * Added an 'install' target and Debianization. A Debian package will be available with this release. It hasn't been tested much yet, but it's probably pretty safe. * Reorganized the C extension modules. * Generally dusted off all of the cobwebs. SUBTERFUGUE lives! ============================================================================== README: This is SUBTERFUGUE. See 'NEWS' for info on the latest release. SUBTERFUGUE is a framework for observing and playing with the reality of software; it's a foundation for building tools to do tracing, sandboxing, and many other things. You could think of it as "strace meets expect." Here's a short (real) "screenshot" which hints at one of its possible uses: # sf --trick=SimplePathSandbox:"read=['/'];write=['/dev/tty'];net=1" bash # id uid=0(root) gid=0(root) groups=0(root) # rm -f /etc/passwd write deny (unlink): '/etc/passwd' rm: cannot unlink `/etc/passwd': Permission denied BEWARE: This is an alpha release. Don't run this as root, except on a scratch system. Don't use it to run programs where a loss of state might be disastrous (e.g., fetchmail). Consider yourself warned. See 'http://subterfugue.org' and the sf(1) man page for more info. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (GNU/Linux) Comment: Processed by Mailcrypt 3.5.5 and Gnu Privacy Guard <http://www.gnupg.org/> iD8DBQE5/VKyHxpYi0vMj/QRAjL/AKClNUGMEevtvFil9TTAd5ykPblVQQCgtFuG btTp1IdqYi6lfWDzUwgh8cQ= =5N9W -----END PGP SIGNATURE----- |
From: Mike C. <mk...@kc...> - 2000-03-17 20:21:47
|
SUBTERFUGUE 0.1.9 is available. This release contains two substantial improvements. First is a fast ignored-call loop, in C, written by Pavel Machek. The actual speedup will vary depending on what fraction of system calls each trick needs to follow, but for tricks that only follow a few calls (e.g., sandboxes), the speedup is quite noticeable, particularly after initial application startup. Second is a feature (a hack) that will enable you to run SUBTERFUGUE on a vanilla kernel, 2.3.99-pre1 or later. Running without the patch is perhaps only half as fast as with, but now you can try SUBTERFUGUE without having to make a special kernel. (The next-to-last SUBTERFUGUE patchlet was included in 2.3.99-pre1. [Hooray!!] If the last patchlet makes it in by 2.4, this hack will go away.) As always, feedback is welcome. Have fun! ============================================================================== >From NEWS: Version 0.1.9 ("pagliacci") * Added fast (in C) ignored-call loop from Pavel Machek. * Added '--waitchannelhack', which will allow SUBTERFUGUE to run (albeit slowly) with no kernel patch on linux 2.3.99 or later. * The '--output' flag now accepts a file descriptor number as an argument, making it easier to separate SUBTERFUGUE output from that of the traced program. * More bug fixes. ============================================================================== This is SUBTERFUGUE. See 'NEWS' for info on the latest release. SUBTERFUGUE is a framework for observing and playing with the reality of software; it's a foundation for building tools to do tracing, sandboxing, and many other things. You could think of it as "strace meets expect." Here's a short (real) "screenshot" which hints at one of its possible uses: # sf --trick=SimplePathSandbox:"read=['/'];write=['/dev/tty'];net=1" bash # id uid=0(root) gid=0(root) groups=0(root) # rm -f /etc/passwd write deny (unlink): '/etc/passwd' rm: cannot unlink `/etc/passwd': Permission denied BEWARE: This is an alpha release. It might not hose your system, but who can say? You probably shouldn't even be reading this. Don't run this as root, except on a scratch system. Don't use it to run programs where a loss of state might be disastrous (e.g., fetchmail). Consider yourself warned. See 'http://subterfugue.org' for more info. |
From: Mike C. <mk...@kc...> - 2000-03-12 09:50:53
|
SUBTERFUGUE 0.1.2 is available. From NEWS: Version 0.1.2 ("georgia") * Several improvements and new tricks (PathSandbox, NoMunmap, Paranoia, Umask) from Pavel Machek. * Removed dependency on PTRACE_GETPPID. Added use of PTRACE_O_TRACESYSGOOD; the corresponding kernel patch allows backward compatibility with existing versions of 'strace'. ============================================================================== This is SUBTERFUGUE. See 'NEWS' for info on the latest release. SUBTERFUGUE is a framework for observing and playing with the reality of software; it's a foundation for building tools to do tracing, sandboxing, and many other things. You could think of it as "strace meets expect." Here's a short (real) "screenshot" which hints at one of its possible uses: # sf --trick=SimplePathSandbox:"read=['/'];write=['/dev/tty'];net=1" bash # id uid=0(root) gid=0(root) groups=0(root) # rm -f /etc/passwd write deny (unlink): '/etc/passwd' rm: cannot unlink `/etc/passwd': Permission denied BEWARE: This is an alpha release. It might not hose your system, but who can say? You probably shouldn't even be reading this. Don't run this as root, except on a scratch system. Don't use it to run programs where a loss of state might be disastrous (e.g., fetchmail). Consider yourself warned. See 'http://subterfugue.org' for more info. |
From: Mike C. <mk...@kc...> - 2000-03-08 04:55:42
|
SUBTERFUGUE 0.1.1 is available. The main change is a partial integration of Pavel Machek's experimental safe scratch area code, which can prevent threaded programs from escaping SUBTERFUGUE. From NEWS: Version 0.1.1 ("sanchez") * First cut at integration of Pavel Machek's patch. It includes his safe scratch area stuff (see scratch.py and ScratchTrick.py), plus several new tricks (Arg, Net, NoKill, NoClose123, GoodDisc). * Enhancement to SimplePathSandbox to support denial of access to certain paths. (also from Pavel) ============================================================================== This is SUBTERFUGUE. See 'NEWS' for info on the latest release. SUBTERFUGUE is a framework for observing and playing with the reality of software; it's a foundation for building tools to do tracing, sandboxing, and many other things. You could think of it as "strace meets expect." Here's a short (real) "screenshot" which hints at one of its possible uses: # sf --trick=SimplePathSandbox:"read=['/'];write=['/dev/tty'];net=1" bash # id uid=0(root) gid=0(root) groups=0(root) # rm -f /etc/passwd write deny (unlink): '/etc/passwd' rm: cannot unlink `/etc/passwd': Permission denied BEWARE: This is an alpha release. It might not hose your system, but who can say? You probably shouldn't even be reading this. Don't run this as root, except on a scratch system. Don't use it to run programs where a loss of state might be disastrous (e.g., fetchmail). Consider yourself warned. See 'http://subterfugue.org' for more info. |
From: Mike C. <mk...@kc...> - 2000-03-03 06:58:15
|
SUBTERFUGUE 0.1.0, which has minor changes from 0.0, is available. From NEWS: Version 0.1.0 ("somewhere") * Optimization (for speed) of process following. (Following 'emacs -nw' with no tricks, for example, is now about 30-40% faster.) * Improved path canonicalization, from a suggestion by Pavel Kankovsky. * Bug fixes. ============================================================================== This is SUBTERFUGUE. See 'NEWS' for info on the latest release. SUBTERFUGUE is a framework for observing and playing with the reality of software; it's a foundation for building tools to do tracing, sandboxing, and many other things. You could think of it as "strace meets expect." Here's a short (real) "screenshot" which hints at one of its possible uses: # sf --trick=SimplePathSandbox:"read=['/'];write=['/dev/tty'];net=1" bash # id uid=0(root) gid=0(root) groups=0(root) # rm -f /etc/passwd write deny (unlink): '/etc/passwd' rm: cannot unlink `/etc/passwd': Permission denied BEWARE: This is an alpha release. It might not hose your system, but who can say? You probably shouldn't even be reading this. Don't run this as root, except on a scratch system. Don't use it to run programs where a loss of state might be disastrous (e.g., fetchmail). Consider yourself warned. See 'http://subterfugue.org' for more info. |
From: Mike C. <mk...@kc...> - 2000-02-07 05:51:16
|
I'm pleased to announce the first public release of SUBTERFUGUE. Here is a brief description from the README. --Mike ------------------------------------------------------------------------------ This is SUBTERFUGUE, version 0.0 ("slaughter"). SUBTERFUGUE is a framework for observing and playing with the reality of software; it's a foundation for building tools to do tracing, sandboxing, and many other things. You could think of it as "strace meets expect." Here's a short (real) "screenshot" which hints at one of its possible uses: # sf --trick=SimplePathSandbox:"read=['/'];write=['/dev/tty'];net=1" bash # id uid=0(root) gid=0(root) groups=0(root) # rm -f /etc/passwd write deny (unlink): '/etc/passwd' rm: cannot unlink `/etc/passwd': Permission denied BEWARE: This is a pre-alpha release. It might not hose your system, but who can say? You probably shouldn't even be reading this. Don't run this as root (yet). Don't use it to run programs where a loss of state might be disastrous (e.g., fetchmail). Consider yourself warned. See 'http://subterfugue.org' for more info. |