diff options
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/source/changelog.rst | 16 | ||||
| -rw-r--r-- | doc/source/config.rst | 4 | ||||
| -rw-r--r-- | doc/source/papers.rst | 9 |
3 files changed, 26 insertions, 3 deletions
diff --git a/doc/source/changelog.rst b/doc/source/changelog.rst index 307c92c..39b65cf 100644 --- a/doc/source/changelog.rst +++ b/doc/source/changelog.rst | |||
| @@ -1,8 +1,22 @@ | |||
| 1 | Changelog | 1 | Changelog |
| 2 | ========= | 2 | ========= |
| 3 | 3 | ||
| 4 | 0.7.1 - `Proboscidea <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.7.0>`__ 2021/08/02 | ||
| 5 | ------------------------------------------------------------------------------------------------- | ||
| 6 | |||
| 7 | * Fixed possible memory-leaks when hooking via regular expressions | ||
| 8 | * Modernise the code by removing usage of `strtok` | ||
| 9 | * Prevent a possible crash during configuration reloading | ||
| 10 | * Fix the default rules to catch dangerous `chmod` calls | ||
| 11 | * Improve compatibility with various `libpcre` configurations/versions | ||
| 12 | * Improve the default rules' compatibility with php8 | ||
| 13 | * Prevent XXE in php8 as well | ||
| 14 | * Improve a bit the verbosity of the logs | ||
| 15 | * Add a rules file for php8 | ||
| 16 | |||
| 17 | |||
| 4 | 0.7.0 - `Los Elefantes <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.7.0>`__ 2021/01/02 | 18 | 0.7.0 - `Los Elefantes <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.7.0>`__ 2021/01/02 |
| 5 | ---------------------------------------------------------------------------------------------------------- | 19 | --------------------------------------------------------------------------------------------------- |
| 6 | 20 | ||
| 7 | New features | 21 | New features |
| 8 | ^^^^^^^^^^^^ | 22 | ^^^^^^^^^^^^ |
diff --git a/doc/source/config.rst b/doc/source/config.rst index 63ddf7b..0b7b7fd 100644 --- a/doc/source/config.rst +++ b/doc/source/config.rst | |||
| @@ -345,8 +345,8 @@ allow this to be prevented. | |||
| 345 | :: | 345 | :: |
| 346 | 346 | ||
| 347 | # Allow `id.php` to restrict system() calls to `id` | 347 | # Allow `id.php` to restrict system() calls to `id` |
| 348 | sp.disable_function.function("system").filename("id.php").param("cmd").value("id").allow(); | 348 | sp.disable_function.function("system").filename("/var/www/html/id.php").param("cmd").value("id").allow(); |
| 349 | sp.disable_function.function("system").filename("id.php").drop() | 349 | sp.disable_function.function("system").filename("/var/www/html/id.php").drop() |
| 350 | 350 | ||
| 351 | Of course, this is a trivial example, a lot can be achieved with this feature, as you will see below. | 351 | Of course, this is a trivial example, a lot can be achieved with this feature, as you will see below. |
| 352 | 352 | ||
diff --git a/doc/source/papers.rst b/doc/source/papers.rst index 35905dd..3d043f0 100644 --- a/doc/source/papers.rst +++ b/doc/source/papers.rst | |||
| @@ -59,6 +59,8 @@ Mentions | |||
| 59 | """" | 59 | """" |
| 60 | 60 | ||
| 61 | - `Habr - PHP Дайджест № 196 <https://habr.com/ru/post/536726/>`__ (ru) - Habr | 61 | - `Habr - PHP Дайджест № 196 <https://habr.com/ru/post/536726/>`__ (ru) - Habr |
| 62 | - `OWASP's PHP Configuration Cheat Sheet <https://cheatsheetseries.owasp.org/cheatsheets/PHP_Configuration_Cheat_Sheet.html#snuffleupagus>`__ - OWASP | ||
| 63 | |||
| 62 | 64 | ||
| 63 | 65 | ||
| 64 | Articles | 66 | Articles |
| @@ -103,9 +105,16 @@ Articles | |||
| 103 | - `Sortie de Snuffleupagus 0.7.0 - Los Elefantes <https://linuxfr.org/news/sortie-de-snuffleupagus-0-7-0-los-elefantes>`__ (fr) - linuxfr | 105 | - `Sortie de Snuffleupagus 0.7.0 - Los Elefantes <https://linuxfr.org/news/sortie-de-snuffleupagus-0-7-0-los-elefantes>`__ (fr) - linuxfr |
| 104 | - `Virtual patching CVE-2021-29447 with Snuffleupagus <https://dustri.org/b/virtual-patching-cve-2021-29447-with-snuffleupagus.html>`__ - dustri.org | 106 | - `Virtual patching CVE-2021-29447 with Snuffleupagus <https://dustri.org/b/virtual-patching-cve-2021-29447-with-snuffleupagus.html>`__ - dustri.org |
| 105 | 107 | ||
| 108 | 2022 | ||
| 109 | """" | ||
| 110 | |||
| 111 | - `Lightweight post-exploitation hardening in PHP via call-site freezing and | ||
| 112 | ghetto-CFI with Snuffleupagus | ||
| 113 | <https://dustri.org/b/lightweight-post-exploitation-hardening-in-php-via-call-site-freezing-and-ghetto-cfi-with-snuffleupagus.html>`__ - dustri.org | ||
| 106 | 114 | ||
| 107 | Papers | 115 | Papers |
| 108 | ------ | 116 | ------ |
| 117 | |||
| 109 | - `Sécurisez vos applications php avec Snuffleupagus <https://connect.ed-diamond.com/GNU-Linux-Magazine/GLMF-213/Securisez-vos-applications-PHP-avec-Snuffleupagus>`__ (fr) (paywall) - 2018-03-2018 | 118 | - `Sécurisez vos applications php avec Snuffleupagus <https://connect.ed-diamond.com/GNU-Linux-Magazine/GLMF-213/Securisez-vos-applications-PHP-avec-Snuffleupagus>`__ (fr) (paywall) - 2018-03-2018 |
| 110 | 119 | ||
| 111 | 120 | ||
