summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2015-10-19deduplicate in[6]_pcbbind() port scan loop.Vincent Gross
2015-10-19Avoid a NULL dereference when getgrnam_r() returns NULL for `result'.YASUOKA Masahiko
2015-10-19Update etc/mtree/BSD.x11.dist (freetype-2.6.1)David Coppa
2015-10-19Call tzset() before dropping the priviledge to use correct timezone.YASUOKA Masahiko
2015-10-19Can't assert "module->fd >= 0" in radiusd_stop() since the module mayYASUOKA Masahiko
2015-10-19Move bge rxeof and txeof outside the kernel lock.Jonathan Matthew
2015-10-19Apply style(9) to header includes.mmcc
2015-10-18Need <string.h> for memset()Philip Guenther
2015-10-18pledge bgplg(8).Sebastian Benoit
2015-10-18Finish first round of rework of the rc script.Robert Peichaer
2015-10-18Pass current directory as a string rather than a file descriptor becauseNicholas Marriott
2015-10-18The change of 5.7's sys/arch/i386/i386/bus_space.c andSASANO Takayoshi
2015-10-18Instead of fragile CMSG parsing, control pledge "sendfd" and "recvfd"Theo de Raadt
2015-10-18Pull in <float.h> instead of declaring __flt_rounds() locallyPhilip Guenther
2015-10-18fix lmtp delivery regressions introduced in previous:Joerg Jung
2015-10-18Move more EXTERN-defined globals from sh.h.mmcc
2015-10-18Backport another Broadwell fix from Linux 3.15Mark Kettenis
2015-10-18Use "getpw" rather than "flock", per deraadt@'s suggestion.Miod Vallat
2015-10-18Avoid integer overflow with very large files.Tobias Stoeckmann
2015-10-18Fix comments.Robert Peichaer
2015-10-18pledge+=flock, for /var/run/ypbind.lock. ok semarie@Miod Vallat
2015-10-18Do not warn for sort -o if we can't chown the output temporary fileTodd C. Miller
2015-10-18Add "id" pledge to syslogd privsep process. Needed for logging to pipe.Alexander Bluhm
2015-10-18Make use of pledge(2); initial diff from deraadt@Jeremie Courreges-Anglas
2015-10-18actually, it uses getaddrinfoTheo de Raadt
2015-10-18libc DNS functions will now use the new dnssocket() / dnsconnect()Theo de Raadt
2015-10-18Tweak previous: call fatal(), not err(3), for consistency. err.h goes away.Jeremie Courreges-Anglas
2015-10-18regress pledge: test kill()Sebastien Marie
2015-10-18regress pledge: remove cmsgSebastien Marie
2015-10-18regress pledge: cpath testSebastien Marie
2015-10-18regress pledge: cmsg is deprecatedSebastien Marie
2015-10-18regress pledge: tweak a bit the manner to grab hte syscall numberSebastien Marie
2015-10-18Need native-pledge for id.Doug Hogan
2015-10-18ld.so no longer needs or uses a bind lock, so stop setting it. ThisPhilip Guenther
2015-10-18Tadpole/Sun Voyager IIi reported to work via dmesg@Jonathan Gray
2015-10-18move SS_DNS socket check from kern_plegde.c to sys_generic.cSebastien Marie
2015-10-18Use offsetof() instead of adding the sizes of the preceeding struct membersPhilip Guenther
2015-10-18Make sure sm_rotate_bak() is only run once.Antoine Jacoutot
2015-10-18getting sloppy, lost a }Theo de Raadt
2015-10-18sorry, sdiff -o interactive mode does another spawnTheo de Raadt
2015-10-18Add "dns" to the pledges. Previously these worked because of "inet",Theo de Raadt
2015-10-18Forcibly delete /var/run/ypbind.lock to prepare for the worst cases.Theo de Raadt
2015-10-18unrelated commit; not ready yetTheo de Raadt
2015-10-18First casualty of making pledge "dns" mandatory for dns users.Theo de Raadt
2015-10-18Move your drink further away... When a program pledged "getpw" fails toTheo de Raadt
2015-10-18after kmem is open and setup, pledge "stdio rpath wpath cpath"Theo de Raadt
2015-10-18Collapse some strange programmer style with too much abstraction.Theo de Raadt
2015-10-18With TIOCSTI supported in pledge "tty proc", csh is good enough to runTheo de Raadt
2015-10-18A whole buncha unsigned char casts for ctype function arguments.mmcc
2015-10-18Use explicit_bzero() when the memory is freed directly afterward.mmcc