summaryrefslogtreecommitdiff
path: root/bin/systrace/parse.y
AgeCommit message (Collapse)Author
2006-03-18fix problems found by Coverity via NetBSD:Robert Nagy
- systrace.c: Don't try to dereference pw when it's NULL. Coverity CID 900 - parse.y: free allocated space on failure Coverity CID 1661 - policy.c: Change a return to "goto out" so that fclose will be called. Coverity CID 1881 ok sturm@, ray@
2003-07-19- sync with NetBSD or Niels' tarball where appropriateNikolay Sturm
- keeps local changes - fixes a bug in profile feedback optimization and avoids symbol conflicts with errno - new feature: "ask" action itojun@ ok
2003-05-29>permit numberic values for uid and gid; allow "<" and ">" for less andJun-ichiro itojun Hagino
>greate; requested by dugsong@, strum ok
2002-12-09add support for regular expressions and pidname translations. from provosJun-ichiro itojun Hagino
2002-11-26error should go to stderr. from provosJun-ichiro itojun Hagino
2002-10-16support for privilege elevation.Jun-ichiro itojun Hagino
with privilege elevation no suid or sgid binaries are necessary any longer. Applications can be executed completely unprivileged. Systrace raises the privileges for a single system call depending on the configured policy. Idea from discussions with Perry Metzger, Dug Song and Marcus Watts. from provos
2002-10-09predicates are part of the grammar now; in non-root case, predicates areJun-ichiro itojun Hagino
evaluated only once; in root case, predicates and variable expansion are dynamic. from provos
2002-08-04keep track of ppid and allow matching rules to be logged via syslog.Niels Provos
2002-07-30include filter.h, dont' duplicate prototypeJun-ichiro itojun Hagino
2002-07-30extern decls should be outside of function.Jun-ichiro itojun Hagino
2002-07-19constify, have missing prototypes, use pedantic compilation options.Jun-ichiro itojun Hagino
niels ok
2002-07-16internal uid/gid tracking. permit can not detach systrace, useful forNiels Provos
sshd.
2002-06-05rcsidsMichael Shalayeff
2002-06-05inpath logic, for example, filename inpath "$CWD"Niels Provos
2002-06-04make it compile.Niels Provos
2002-06-04lexer and parserNiels Provos