Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-03-18 | fix problems found by Coverity via NetBSD: | Robert Nagy | |
- systrace.c: Don't try to dereference pw when it's NULL. Coverity CID 900 - parse.y: free allocated space on failure Coverity CID 1661 - policy.c: Change a return to "goto out" so that fclose will be called. Coverity CID 1881 ok sturm@, ray@ | |||
2003-07-19 | - sync with NetBSD or Niels' tarball where appropriate | Nikolay Sturm | |
- keeps local changes - fixes a bug in profile feedback optimization and avoids symbol conflicts with errno - new feature: "ask" action itojun@ ok | |||
2003-05-29 | >permit numberic values for uid and gid; allow "<" and ">" for less and | Jun-ichiro itojun Hagino | |
>greate; requested by dugsong@, strum ok | |||
2002-12-09 | add support for regular expressions and pidname translations. from provos | Jun-ichiro itojun Hagino | |
2002-11-26 | error should go to stderr. from provos | Jun-ichiro itojun Hagino | |
2002-10-16 | support for privilege elevation. | Jun-ichiro itojun Hagino | |
with privilege elevation no suid or sgid binaries are necessary any longer. Applications can be executed completely unprivileged. Systrace raises the privileges for a single system call depending on the configured policy. Idea from discussions with Perry Metzger, Dug Song and Marcus Watts. from provos | |||
2002-10-09 | predicates are part of the grammar now; in non-root case, predicates are | Jun-ichiro itojun Hagino | |
evaluated only once; in root case, predicates and variable expansion are dynamic. from provos | |||
2002-08-04 | keep track of ppid and allow matching rules to be logged via syslog. | Niels Provos | |
2002-07-30 | include filter.h, dont' duplicate prototype | Jun-ichiro itojun Hagino | |
2002-07-30 | extern decls should be outside of function. | Jun-ichiro itojun Hagino | |
2002-07-19 | constify, have missing prototypes, use pedantic compilation options. | Jun-ichiro itojun Hagino | |
niels ok | |||
2002-07-16 | internal uid/gid tracking. permit can not detach systrace, useful for | Niels Provos | |
sshd. | |||
2002-06-05 | rcsids | Michael Shalayeff | |
2002-06-05 | inpath logic, for example, filename inpath "$CWD" | Niels Provos | |
2002-06-04 | make it compile. | Niels Provos | |
2002-06-04 | lexer and parser | Niels Provos | |