Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-07-07 | fix an issue when scripts are exec'd under systrace where | marius eriksen | |
the argv[0] would be normalized, and hence break scripts that depend on how they were called. this fixes an issue in the ports builds. ok provos@ deraadt@; lots of testing during hackathon sturm@ naddy@ | |||
2003-10-08 | originally from cb@openbsd.org, adapted by provos | Nikolay Sturm | |
itojun@ ok fix a race condition between path resolution in userland and the subsequent namei(): inform the kernel portion of valid filenames and then disallow symlink lookups for those filenames by means of a hook in namei(). with suggestions from provos@ also, add (currently unused) seqnr field to struct systrace_replace, from provos@ | |||
2002-08-01 | the last component in a filename for unlink may be a symlink | Niels Provos | |
2002-07-20 | compile on sparc64 | Niels Provos | |
2002-07-19 | constify, have missing prototypes, use pedantic compilation options. | Jun-ichiro itojun Hagino | |
niels ok | |||
2002-07-14 | argv translation for exeve | Niels Provos | |
2002-07-13 | use correct length for PF_LOCAL sockets; not all applications fill in | Niels Provos | |
sa_len | |||
2002-06-21 | rewrite all system call arguments in the permit case. use realpath | Niels Provos | |
when we still have the root and we of the monitored process. this eliminates almost all race coniditions. | |||
2002-06-19 | more careful buffer handling; pointed out by deraadt@ | Niels Provos | |
2002-06-04 | KNF | Theo de Raadt | |
2002-06-04 | initial import of systrace. don't touch this, more stuff coming in a while | Niels Provos | |