summaryrefslogtreecommitdiff
path: root/doc
diff options
context:
space:
mode:
Diffstat (limited to 'doc')
-rw-r--r--doc/source/changelog.rst16
-rw-r--r--doc/source/config.rst4
-rw-r--r--doc/source/papers.rst9
3 files changed, 26 insertions, 3 deletions
diff --git a/doc/source/changelog.rst b/doc/source/changelog.rst
index 307c92c..39b65cf 100644
--- a/doc/source/changelog.rst
+++ b/doc/source/changelog.rst
@@ -1,8 +1,22 @@
1Changelog 1Changelog
2========= 2=========
3 3
40.7.1 - `Proboscidea <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.7.0>`__ 2021/08/02
5-------------------------------------------------------------------------------------------------
6
7* Fixed possible memory-leaks when hooking via regular expressions
8* Modernise the code by removing usage of `strtok`
9* Prevent a possible crash during configuration reloading
10* Fix the default rules to catch dangerous `chmod` calls
11* Improve compatibility with various `libpcre` configurations/versions
12* Improve the default rules' compatibility with php8
13* Prevent XXE in php8 as well
14* Improve a bit the verbosity of the logs
15* Add a rules file for php8
16
17
40.7.0 - `Los Elefantes <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.7.0>`__ 2021/01/02 180.7.0 - `Los Elefantes <https://github.com/jvoisin/snuffleupagus/releases/tag/v0.7.0>`__ 2021/01/02
5---------------------------------------------------------------------------------------------------------- 19---------------------------------------------------------------------------------------------------
6 20
7New features 21New features
8^^^^^^^^^^^^ 22^^^^^^^^^^^^
diff --git a/doc/source/config.rst b/doc/source/config.rst
index 63ddf7b..0b7b7fd 100644
--- a/doc/source/config.rst
+++ b/doc/source/config.rst
@@ -345,8 +345,8 @@ allow this to be prevented.
345:: 345::
346 346
347 # Allow `id.php` to restrict system() calls to `id` 347 # Allow `id.php` to restrict system() calls to `id`
348 sp.disable_function.function("system").filename("id.php").param("cmd").value("id").allow(); 348 sp.disable_function.function("system").filename("/var/www/html/id.php").param("cmd").value("id").allow();
349 sp.disable_function.function("system").filename("id.php").drop() 349 sp.disable_function.function("system").filename("/var/www/html/id.php").drop()
350 350
351Of course, this is a trivial example, a lot can be achieved with this feature, as you will see below. 351Of course, this is a trivial example, a lot can be achieved with this feature, as you will see below.
352 352
diff --git a/doc/source/papers.rst b/doc/source/papers.rst
index 35905dd..3d043f0 100644
--- a/doc/source/papers.rst
+++ b/doc/source/papers.rst
@@ -59,6 +59,8 @@ Mentions
59"""" 59""""
60 60
61- `Habr - PHP Дайджест № 196 <https://habr.com/ru/post/536726/>`__ (ru) - Habr 61- `Habr - PHP Дайджест № 196 <https://habr.com/ru/post/536726/>`__ (ru) - Habr
62- `OWASP's PHP Configuration Cheat Sheet <https://cheatsheetseries.owasp.org/cheatsheets/PHP_Configuration_Cheat_Sheet.html#snuffleupagus>`__ - OWASP
63
62 64
63 65
64Articles 66Articles
@@ -103,9 +105,16 @@ Articles
103- `Sortie de Snuffleupagus 0.7.0 - Los Elefantes <https://linuxfr.org/news/sortie-de-snuffleupagus-0-7-0-los-elefantes>`__ (fr) - linuxfr 105- `Sortie de Snuffleupagus 0.7.0 - Los Elefantes <https://linuxfr.org/news/sortie-de-snuffleupagus-0-7-0-los-elefantes>`__ (fr) - linuxfr
104- `Virtual patching CVE-2021-29447 with Snuffleupagus <https://dustri.org/b/virtual-patching-cve-2021-29447-with-snuffleupagus.html>`__ - dustri.org 106- `Virtual patching CVE-2021-29447 with Snuffleupagus <https://dustri.org/b/virtual-patching-cve-2021-29447-with-snuffleupagus.html>`__ - dustri.org
105 107
1082022
109""""
110
111- `Lightweight post-exploitation hardening in PHP via call-site freezing and
112 ghetto-CFI with Snuffleupagus
113 <https://dustri.org/b/lightweight-post-exploitation-hardening-in-php-via-call-site-freezing-and-ghetto-cfi-with-snuffleupagus.html>`__ - dustri.org
106 114
107Papers 115Papers
108------ 116------
117
109- `Sécurisez vos applications php avec Snuffleupagus <https://connect.ed-diamond.com/GNU-Linux-Magazine/GLMF-213/Securisez-vos-applications-PHP-avec-Snuffleupagus>`__ (fr) (paywall) - 2018-03-2018 118- `Sécurisez vos applications php avec Snuffleupagus <https://connect.ed-diamond.com/GNU-Linux-Magazine/GLMF-213/Securisez-vos-applications-PHP-avec-Snuffleupagus>`__ (fr) (paywall) - 2018-03-2018
110 119
111 120