Ivy Fay
8c7b23be90
.gitlab-ci.yml: make test command consistent across distros
...
This switches to use "python3 -m unittest discover -v" onevery distro.
2019-12-02 14:45:32 +00:00
georg
db797e3a52
Mention KDE Dolphin service menu (and fix typo)
2019-12-01 12:28:55 +00:00
jvoisin
da182dc2f8
Bump the changelog
2019-11-30 18:31:07 +01:00
jvoisin
e4114af3b5
Improve a bit ppt support
2019-11-30 11:38:22 +01:00
jvoisin
d56f83bed1
Improve a bit odt handling
2019-11-30 10:25:24 +01:00
georg
697cb36b81
This is mat2, not MAT2
...
Closes #131
2019-11-30 01:14:41 -08:00
jvoisin
6e52661cfb
Fix the testsuite on Python3.8
...
There is a bug in Python3.8 (https://bugs.python.org/issue38688 )
triggering an infinite recursion when copying a tree
in a subfolder of the current one. We're working around it
by using a list instead of an iterator, so that Python
won't "discover" the target folder as part of the source files.
This should fix #130
2019-11-30 10:10:41 +01:00
mathilde
03f5129968
fix copyright attribution formatting
2019-11-27 23:10:38 +01:00
georg
deeee256cc
CI: Use pylint, instead of pylint3
...
It seems, despite the name, both packages depend on Python 3. However,
pylint3 seems deprecated, and upstream recommends to install pylint:
https://www.pylint.org/#install
The current versions of both packages in Debian unstable are:
pylint 2.4.4-1
pylint3 2.2.2-1
This commit fixes failing CI jobs due to the use of pylint3 2.2.2-1,
which seems broken.
2019-11-26 23:16:49 +00:00
jvoisin
df1eb98a40
Please the new version of pylint
2019-11-26 22:12:56 +01:00
jvoisin
ada53cb9c6
Add an integration with Dolphin
2019-11-25 21:56:24 +01:00
jvoisin
655c19d17d
Improve a bit the support for ppt files
2019-10-17 23:02:17 +02:00
jvoisin
a389cc760a
Fix a stacktrace in ./mat2 when the file can't be cleaned
2019-10-17 22:51:00 +02:00
jvoisin
4034cf9a1a
Copy file permissions
...
Mat2 (the cli) will now copy the input file permissions
to the output file.
2019-10-13 11:54:47 +02:00
jvoisin
5f0b3beb46
Add a way to disable the sandbox
...
Due to bubblewrap's pickiness, mat2 can now be run
without a sandbox, even if bubblewrap is installed.
2019-10-12 16:13:49 -07:00
jvoisin
3cef7fe7fc
Refactor tests
2019-10-12 13:32:04 -07:00
jvoisin
6d19a20935
Remove an unused variable
2019-10-12 21:41:13 +02:00
jvoisin
12489bb682
Remove a useless \
2019-10-12 21:36:28 +02:00
jvoisin
bb903ec309
Remove useless parenthesis
2019-10-12 21:36:19 +02:00
jvoisin
893faa6604
Fix a test for png's lightweight cleaning on corrupted files
2019-10-12 21:34:31 +02:00
jvoisin
4483c06f19
Replace abstractstaticmethod with abstractmethod
...
Apparently, abstractstaticmethod is deprecated
since python3.3.
2019-10-12 21:28:27 +02:00
madaidan
58773088ac
Mount a new tmpfs on /tmp and drop all capabilities
...
This mounts a new tmpfs on /tmp so any files residing there would be hidden
from the sandbox. Many programs store some files in there that might be useful
to an attacker. It also drops all capabilities incase it is ever run with
extra capabilities for whatever reason.
2019-10-05 15:21:40 +02:00
jvoisin
3714553185
Fix bubblewrap
...
On some machines (like mine), `/proc` has to be mounted. Also, since
sandboxing with bubblewrap is best effort and assumes that an attacker doesn't
have control outside of the file to clean, it's safe to __try__ to enable some
bubblewrap features, and to silently fail otherwise.
2019-09-21 14:14:39 +02:00
jvoisin
1678d37856
Mark a comment as FP
2019-09-01 19:01:33 +02:00
jvoisin
397a18b0cc
Add support for ppm
2019-09-01 09:28:46 -07:00
jvoisin
fc924239fe
Add a test for nsid cleaning
2019-09-01 13:52:02 +02:00
jvoisin
0170f0e37e
Improve a bit the comments in the code
...
This is related to the previous commit
2019-09-01 13:52:02 +02:00
jvoisin
0cf0541ad9
Remove nsid fields from MSOffice documents
...
nsids are random identifiers, usually used to ease merging
between documents, and can trivially be used for fingerprinting.
2019-09-01 13:52:02 +02:00
jvoisin
40669186c9
Add support for inplace cleaning
2019-08-31 10:31:08 -07:00
jvoisin
d76a6cbb18
Some arguments of mat2 are mutually exclusive
2019-08-01 08:14:21 -07:00
jvoisin
49e0c43ac5
Tweak a bit the ci
...
- gentoo and debian with bubblewrap are not allowed to fail anymore
- don't run coverage on debian without bubblewrap
2019-07-22 23:36:20 +02:00
jvoisin
0c75cd15dc
Remove a mypy workaround to bump coverage back to 100%
2019-07-22 23:28:51 +02:00
jvoisin
5280b6c2b3
Add a test for svg namespace
2019-07-22 23:21:06 +02:00
georg
a81ea65d44
CI: Run bubblewrap tests as different user than 'root' to fix errors
...
It seems, there is a bug somewhere if the test suite is invoked as
'root', and bubblewrap is available.
2019-07-22 13:39:06 -07:00
georg
8bb2826f7a
CI: Add job to run codespell, a spell checking software
2019-07-22 13:31:40 -07:00
jvoisin
5c33b290ae
Fix mypy
2019-07-20 16:05:55 +02:00
jvoisin
00d728f6cc
Display the filename along with the "No metadata found" message
2019-07-18 01:30:28 +02:00
georg
65cfd110f9
Nautilus: Add note that distribution packages ship the extension
...
Relates #106
2019-07-14 23:07:36 +00:00
georg
1f830bf8ad
README: Drop note about Debian jessie, which is oldoldstable nowadays
...
As such, hopefully, it's not really used widely anymore. If so, this
note isn't really relevant.
2019-07-14 14:19:45 -07:00
georg
d027008e46
README: Add note about the user interfaces provided
2019-07-14 14:01:54 -07:00
georg
1163bdd991
README: Drop note about web disclosure to broaden the possible use cases
2019-07-14 19:22:33 +00:00
georg
1be0a4eefb
INSTALL: Update Debian package status
...
Also, make the note generic, to omit the need to update it "constantly".
Closes #76
2019-07-13 14:29:55 -07:00
jvoisin
dc5603eb1d
Please mypy
2019-07-13 23:25:44 +02:00
jvoisin
4999209f9c
Add support for svg
2019-07-13 21:26:05 +02:00
jvoisin
bdd5581033
Compress cleaned zip archives by default
2019-07-13 15:04:43 +02:00
jvoisin
47f9cb33bf
Please mypy
2019-07-13 15:03:40 +02:00
georg
b784a9fc7f
doc/threat_model: this is about mat2, not mat
2019-07-10 14:36:47 +00:00
jvoisin
88b95923ab
Parallelize the cli
2019-06-05 22:28:57 +02:00
jvoisin
13d71a2565
Document the archives handling implementation's details
2019-05-16 20:59:15 +02:00
jvoisin
35d550d229
Use memoization get _*_path() functions
...
This shouldn't make a big difference in the CLI/extension
usage, but might improve the performances of long-running
instances, or people misusing the API.
2019-05-16 00:31:40 +02:00
