summaryrefslogtreecommitdiff
path: root/bin/systrace/filter.c
AgeCommit message (Expand)Author
2003-08-04several diffs from Niels as applied to NetBSDNikolay Sturm
2003-07-19- sync with NetBSD or Niels' tarball where appropriateNikolay Sturm
2003-06-16- limited number of processes per systraceJun-ichiro itojun Hagino
2003-05-29>permit numberic values for uid and gid; allow "<" and ">" for less andJun-ichiro itojun Hagino
2003-04-24fix for EOF in interactive policy generation.Mike Pechkin
2002-12-09add support for regular expressions and pidname translations. from provosJun-ichiro itojun Hagino
2002-12-09prevent the use of permit for aliases. from provosJun-ichiro itojun Hagino
2002-11-15no need to check trans_size. from provosJun-ichiro itojun Hagino
2002-10-16support for privilege elevation.Jun-ichiro itojun Hagino
2002-10-16correctly evaluate group predicates.Jun-ichiro itojun Hagino
2002-10-09predicates are part of the grammar now; in non-root case, predicates areJun-ichiro itojun Hagino
2002-10-08assume that inserting a template implies permit for the currentJun-ichiro itojun Hagino
2002-09-23support for templates. they allow fast generation of new policies. anJun-ichiro itojun Hagino
2002-08-08no \n in errNiels Provos
2002-07-19constify, have missing prototypes, use pedantic compilation options.Jun-ichiro itojun Hagino
2002-07-09support for system call aliasing. stat/fstat/readlink/access etc... getsNiels Provos
2002-06-19more careful buffer handling; pointed out by deraadt@Niels Provos
2002-06-18KNFTheo de Raadt
2002-06-11change a few buffers to 2*MAXPATHLEN; pob deraadt@Niels Provos
2002-06-09knfTodd T. Fries
2002-06-07use profiling to order filter lists more optimally.Niels Provos
2002-06-06fix automatic policy generation for system calls that have the same argsNiels Provos
2002-06-05no special case of execve.Niels Provos
2002-06-05introduce an automatic policy generation mode. it creates a policy basedNiels Provos
2002-06-05inpath logic, for example, filename inpath "$CWD"Niels Provos
2002-06-05know about CWD. will make some filter rules simpler.Niels Provos
2002-06-04KNFTheo de Raadt
2002-06-04__FUNCTION__ -> __func__ from espie@Niels Provos
2002-06-04initial import of systrace. don't touch this, more stuff coming in a whileNiels Provos