summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2015-10-04add _eigrpd user/groupTheo de Raadt
2015-10-04expr can use tame "stdio"Theo de Raadt
2015-10-04ls can use tame "stdio rpath getpw". It does uid/gid lookups, usingTheo de Raadt
2015-10-04df is a tame "stdio rpath" program, the rpath due to getfsstat and statfs.Theo de Raadt
2015-10-04Remove useless pattern_t typedef, POSIX regex is here to stay soTodd C. Miller
2015-10-04Apply some style(9), tweak a few things for readability and add someJoel Sing
2015-10-04Remove #ifdefs for non-POSIX systems. Also remove #ifdef forTodd C. Miller
2015-10-04after dd has opened it's files and done the tape positioning ioctl, weTheo de Raadt
2015-10-04Plural.Antoine Jacoutot
2015-10-04Make it possible to give the same action to several daemons at once.Antoine Jacoutot
2015-10-04a macmini has no light sensor, but reading from light sensor keys isJoerg Jung
2015-10-04fix custom popen to return pid to caller instead of tracking in a giantTed Unangst
2015-10-04remove duplicate key, found by kettenisJoerg Jung
2015-10-04remove stale comment. there is no need to avoid side effects from a "list"Ted Unangst
2015-10-04Clarify a point. Adjust punctuation after discussion w/ jmc@Philip Guenther
2015-10-04Wrap <search.h> to make all the symbols there weakPhilip Guenther
2015-10-04add "usage: " to usage(); from michael reedJason McIntyre
2015-10-04Wrap <spawn.h> to make all the symbols there weakPhilip Guenther
2015-10-04Fix memory leak in error path.Jonathan Matthew
2015-10-04wrap __ivaliduser_sa() so the internal call is direct (at least until wePhilip Guenther
2015-10-04wrap _fwalk() so internal calls are direct (at least until we stopPhilip Guenther
2015-10-04Add tame(2) to file(1) and drop the old systrace(4) sandbox. tame(2) isNicholas Marriott
2015-10-04recv() and send() aren't overriden by libpthread (vs recvfrom() and sendto()!)Philip Guenther
2015-10-04getpeereid() and sockatmark() are neither used in libc nor in ISO C, so markPhilip Guenther
2015-10-04__fdnlist() is exported for libkvm, but the internal call can go directPhilip Guenther
2015-10-04__xdrrec_getrec is in the reserved namespace, so it doesn't need to be weakPhilip Guenther
2015-10-04Delete an inexplicable commentPhilip Guenther
2015-10-04Repair tame() error check to be == -1Theo de Raadt
2015-10-04Allow sysctl read of vm.vm_psstrings, as setproctitle() uses this toTheo de Raadt
2015-10-04spellingTheo de Raadt
2015-10-04syncTheo de Raadt
2015-10-03Add ktracing of tame()'s arguments' valuesPhilip Guenther
2015-10-03tame "stdio rpath" is sufficient for all the operations done by test(1)Theo de Raadt
2015-10-03Track a size in the scary area of cluster_collectbufs, so that we knowTheo de Raadt
2015-10-03Initially eric developers asr as a side-load style library for async DNS.Theo de Raadt
2015-10-03option LFS is dead, but we missed option ACCOUNTING herePhilip Guenther
2015-10-03you can't edit stdin in place. check for this before the hack thatTed Unangst
2015-10-03There is no need to keep a global array of sysconf(_SC_OPEN_MAX) elementsTed Unangst
2015-10-03Enable eigrpd(8) and eigrpctl(8) in the buildsRenato Westphal
2015-10-03obvious tame "stdio rpath"Theo de Raadt
2015-10-03Now that dc(1) no longer supports !command with popen(), we can startTheo de Raadt
2015-10-03delete documentation for ! commandTheo de Raadt
2015-10-03Nuke trailing whitespace to avoid cluttering possible upcoming diffs.Kenneth R Westerback
2015-10-03adapt to the removal of !Otto Moerbeek
2015-10-03disable ! command, makes dc(1) more tameableOtto Moerbeek
2015-10-03oops! cannot tame the chmod case, because the kernel drops theTheo de Raadt
2015-10-03hard to think of a simple program to add tame to. tame "stdio", obviously.Theo de Raadt
2015-10-03wc only opens files read-only, proceses them, and spits results to stdout.Theo de Raadt
2015-10-03correct a memory leak in error code path.Sebastien Marie
2015-10-03As pointed out by tobiasu, ed-style patches still use popen() and executeTheo de Raadt