Age | Commit message (Expand) | Author |
2015-10-18 | Add "id" pledge to syslogd privsep process. Needed for logging to pipe. | Alexander Bluhm |
2015-10-18 | Make use of pledge(2); initial diff from deraadt@ | Jeremie Courreges-Anglas |
2015-10-18 | actually, it uses getaddrinfo | Theo de Raadt |
2015-10-18 | libc DNS functions will now use the new dnssocket() / dnsconnect() | Theo de Raadt |
2015-10-18 | Tweak previous: call fatal(), not err(3), for consistency. err.h goes away. | Jeremie Courreges-Anglas |
2015-10-18 | regress pledge: test kill() | Sebastien Marie |
2015-10-18 | regress pledge: remove cmsg | Sebastien Marie |
2015-10-18 | regress pledge: cpath test | Sebastien Marie |
2015-10-18 | regress pledge: cmsg is deprecated | Sebastien Marie |
2015-10-18 | regress pledge: tweak a bit the manner to grab hte syscall number | Sebastien Marie |
2015-10-18 | Need native-pledge for id. | Doug Hogan |
2015-10-18 | ld.so no longer needs or uses a bind lock, so stop setting it. This | Philip Guenther |
2015-10-18 | Tadpole/Sun Voyager IIi reported to work via dmesg@ | Jonathan Gray |
2015-10-18 | move SS_DNS socket check from kern_plegde.c to sys_generic.c | Sebastien Marie |
2015-10-18 | Use offsetof() instead of adding the sizes of the preceeding struct members | Philip Guenther |
2015-10-18 | Make sure sm_rotate_bak() is only run once. | Antoine Jacoutot |
2015-10-18 | getting sloppy, lost a } | Theo de Raadt |
2015-10-18 | sorry, sdiff -o interactive mode does another spawn | Theo de Raadt |
2015-10-18 | Add "dns" to the pledges. Previously these worked because of "inet", | Theo de Raadt |
2015-10-18 | Forcibly delete /var/run/ypbind.lock to prepare for the worst cases. | Theo de Raadt |
2015-10-18 | unrelated commit; not ready yet | Theo de Raadt |
2015-10-18 | First casualty of making pledge "dns" mandatory for dns users. | Theo de Raadt |
2015-10-18 | Move your drink further away... When a program pledged "getpw" fails to | Theo de Raadt |
2015-10-18 | after kmem is open and setup, pledge "stdio rpath wpath cpath" | Theo de Raadt |
2015-10-18 | Collapse some strange programmer style with too much abstraction. | Theo de Raadt |
2015-10-18 | With TIOCSTI supported in pledge "tty proc", csh is good enough to run | Theo de Raadt |
2015-10-18 | A whole buncha unsigned char casts for ctype function arguments. | mmcc |
2015-10-18 | Use explicit_bzero() when the memory is freed directly afterward. | mmcc |
2015-10-18 | Use explicit_bzero() when the memory is freed directly afterward. | mmcc |
2015-10-18 | TIOCSTI and TIOCSCTTY; oops got the condition backwards. | Theo de Raadt |
2015-10-18 | better placement for dnssocket/dnsconnect | Theo de Raadt |
2015-10-18 | Describe dnssocket / dnsconnect arguments | Theo de Raadt |
2015-10-18 | Allow read/write access to /dev/tty when using "tty" pledge. | Doug Hogan |
2015-10-18 | create libc stubs for dnssocket() and dnsconnect() | Theo de Raadt |
2015-10-18 | sync | Theo de Raadt |
2015-10-18 | Add two new system calls: dnssocket() and dnsconnect(). This creates a | Theo de Raadt |
2015-10-17 | naddy asks me if __tfork should be allowed by "proc". yes! | Theo de Raadt |
2015-10-17 | connect() to an AF_UNIX socket is really read/write, so tell pledge this | Theo de Raadt |
2015-10-17 | Allow the nasty ioctl TIOCSTI in "tty", but also require the "proc" | Theo de Raadt |
2015-10-17 | better wording in a comment | Theo de Raadt |
2015-10-17 | Unify TIOCGPGRP/TIOCGWINSZ/TIOCGWINSZ behaviour regarding ENOTTY return. | Theo de Raadt |
2015-10-17 | Allow TIOCSCTTY on tty devices, if the pledge says "tty id" | Theo de Raadt |
2015-10-17 | whitespace | Theo de Raadt |
2015-10-17 | Rename SYSEXIT() to SYSCALL_END() for consistency with most other archs. | Philip Guenther |
2015-10-17 | mailaddr_match() allows comparing two struct mailaddr taking into account | Gilles Chehade |
2015-10-17 | Move the last of the __DBINTERFACE_PRIVATE bits from <db.h> to libc's wrapper | Philip Guenther |
2015-10-17 | Fix the code that sets up the MCH BAR on systems where the (buggy) BIOS | Mark Kettenis |
2015-10-17 | Tighten pledge: We only write to stdio and never to any files if | Christian Weisgerber |
2015-10-17 | Spell all "unexpected mode %u" panics in lower case, not just one of them. | Stefan Sperling |
2015-10-17 | remove some unneccessary macros; from michael reed | Jason McIntyre |