summaryrefslogtreecommitdiff
path: root/bin/systrace/systrace.h
AgeCommit message (Collapse)Author
2002-12-09add support for regular expressions and pidname translations. from provosJun-ichiro itojun Hagino
2002-11-16rename translation tables. from provosJun-ichiro itojun Hagino
2002-10-16support for privilege elevation.Jun-ichiro itojun Hagino
with privilege elevation no suid or sgid binaries are necessary any longer. Applications can be executed completely unprivileged. Systrace raises the privileges for a single system call depending on the configured policy. Idea from discussions with Perry Metzger, Dug Song and Marcus Watts. from provos
2002-10-16translation for socket system callJun-ichiro itojun Hagino
from provos
2002-10-09predicates are part of the grammar now; in non-root case, predicates areJun-ichiro itojun Hagino
evaluated only once; in root case, predicates and variable expansion are dynamic. from provos
2002-09-23support for templates. they allow fast generation of new policies. anJun-ichiro itojun Hagino
appropriate template can be inserted during initial policy generation. from provos
2002-08-05allow to specify an alternate directory for policy loading and writingNiels Provos
2002-08-04keep track of ppid and allow matching rules to be logged via syslog.Niels Provos
2002-07-30avoid using same variable name for global and auto variable.Jun-ichiro itojun Hagino
2002-07-19constify, have missing prototypes, use pedantic compilation options.Jun-ichiro itojun Hagino
niels ok
2002-07-16internal uid/gid tracking. permit can not detach systrace, useful forNiels Provos
sshd.
2002-07-14argv translation for exeveNiels Provos
2002-07-13uname translationNiels Provos
2002-07-11cleanupNiels Provos
2002-07-09support for system call aliasing. stat/fstat/readlink/access etc... getsNiels Provos
grouped into fsread, unlink/rmdir/mkdir goes to fswrite. open switches back between fsread and fswrite depending on oflags parameter.
2002-06-07use profiling to order filter lists more optimally.Niels Provos
2002-06-04log offending syscalls to syslog in automatic mode. dugsong@Niels Provos
2002-06-04explicit path for notification tool xsystrace.Niels Provos
2002-06-04KNFTheo de Raadt
2002-06-04initial import of systrace. don't touch this, more stuff coming in a whileNiels Provos