| Age | Commit message (Expand) | Author |
|---|
| 2015-10-18 | Move more EXTERN-defined globals from sh.h. | mmcc |
| 2015-10-18 | Backport another Broadwell fix from Linux 3.15 | Mark Kettenis |
| 2015-10-18 | Use "getpw" rather than "flock", per deraadt@'s suggestion. | Miod Vallat |
| 2015-10-18 | Avoid integer overflow with very large files. | Tobias Stoeckmann |
| 2015-10-18 | Fix comments. | Robert Peichaer |
| 2015-10-18 | pledge+=flock, for /var/run/ypbind.lock. ok semarie@ | Miod Vallat |
| 2015-10-18 | Do not warn for sort -o if we can't chown the output temporary file | Todd C. Miller |
| 2015-10-18 | Add "id" pledge to syslogd privsep process. Needed for logging to pipe. | Alexander Bluhm |
| 2015-10-18 | Make use of pledge(2); initial diff from deraadt@ | Jeremie Courreges-Anglas |
| 2015-10-18 | actually, it uses getaddrinfo | Theo de Raadt |
| 2015-10-18 | libc DNS functions will now use the new dnssocket() / dnsconnect() | Theo de Raadt |
| 2015-10-18 | Tweak previous: call fatal(), not err(3), for consistency. err.h goes away. | Jeremie Courreges-Anglas |
| 2015-10-18 | regress pledge: test kill() | Sebastien Marie |
| 2015-10-18 | regress pledge: remove cmsg | Sebastien Marie |
| 2015-10-18 | regress pledge: cpath test | Sebastien Marie |
| 2015-10-18 | regress pledge: cmsg is deprecated | Sebastien Marie |
| 2015-10-18 | regress pledge: tweak a bit the manner to grab hte syscall number | Sebastien Marie |
| 2015-10-18 | Need native-pledge for id. | Doug Hogan |
| 2015-10-18 | ld.so no longer needs or uses a bind lock, so stop setting it. This | Philip Guenther |
| 2015-10-18 | Tadpole/Sun Voyager IIi reported to work via dmesg@ | Jonathan Gray |
| 2015-10-18 | move SS_DNS socket check from kern_plegde.c to sys_generic.c | Sebastien Marie |
| 2015-10-18 | Use offsetof() instead of adding the sizes of the preceeding struct members | Philip Guenther |
| 2015-10-18 | Make sure sm_rotate_bak() is only run once. | Antoine Jacoutot |
| 2015-10-18 | getting sloppy, lost a } | Theo de Raadt |
| 2015-10-18 | sorry, sdiff -o interactive mode does another spawn | Theo de Raadt |
| 2015-10-18 | Add "dns" to the pledges. Previously these worked because of "inet", | Theo de Raadt |
| 2015-10-18 | Forcibly delete /var/run/ypbind.lock to prepare for the worst cases. | Theo de Raadt |
| 2015-10-18 | unrelated commit; not ready yet | Theo de Raadt |
| 2015-10-18 | First casualty of making pledge "dns" mandatory for dns users. | Theo de Raadt |
| 2015-10-18 | Move your drink further away... When a program pledged "getpw" fails to | Theo de Raadt |
| 2015-10-18 | after kmem is open and setup, pledge "stdio rpath wpath cpath" | Theo de Raadt |
| 2015-10-18 | Collapse some strange programmer style with too much abstraction. | Theo de Raadt |
| 2015-10-18 | With TIOCSTI supported in pledge "tty proc", csh is good enough to run | Theo de Raadt |
| 2015-10-18 | A whole buncha unsigned char casts for ctype function arguments. | mmcc |
| 2015-10-18 | Use explicit_bzero() when the memory is freed directly afterward. | mmcc |
| 2015-10-18 | Use explicit_bzero() when the memory is freed directly afterward. | mmcc |
| 2015-10-18 | TIOCSTI and TIOCSCTTY; oops got the condition backwards. | Theo de Raadt |
| 2015-10-18 | better placement for dnssocket/dnsconnect | Theo de Raadt |
| 2015-10-18 | Describe dnssocket / dnsconnect arguments | Theo de Raadt |
| 2015-10-18 | Allow read/write access to /dev/tty when using "tty" pledge. | Doug Hogan |
| 2015-10-18 | create libc stubs for dnssocket() and dnsconnect() | Theo de Raadt |
| 2015-10-18 | sync | Theo de Raadt |
| 2015-10-18 | Add two new system calls: dnssocket() and dnsconnect(). This creates a | Theo de Raadt |
| 2015-10-17 | naddy asks me if __tfork should be allowed by "proc". yes! | Theo de Raadt |
| 2015-10-17 | connect() to an AF_UNIX socket is really read/write, so tell pledge this | Theo de Raadt |
| 2015-10-17 | Allow the nasty ioctl TIOCSTI in "tty", but also require the "proc" | Theo de Raadt |
| 2015-10-17 | better wording in a comment | Theo de Raadt |
| 2015-10-17 | Unify TIOCGPGRP/TIOCGWINSZ/TIOCGWINSZ behaviour regarding ENOTTY return. | Theo de Raadt |
| 2015-10-17 | Allow TIOCSCTTY on tty devices, if the pledge says "tty id" | Theo de Raadt |
| 2015-10-17 | whitespace | Theo de Raadt |
