| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2009-11-12 | Only allocate memory for the regex after we've validated it instead | Todd C. Miller | |
| of allocating and later freeing if we didn't use it. OK deraadt@ miod@ | |||
| 2009-11-12 | memory leak if regex fails, found by parfait; ok miod | Theo de Raadt | |
| 2007-11-26 | typos; ok jmc@ | Martynas Venckus | |
| sys/netinet/in_pcb.c and sys/net/bridgestp.c ok henning@ sys/dev/pci/bktr/* ok jakemsr@ | |||
| 2007-09-02 | use calloc() to avoid malloc(n * m) overflows; checked by djm canacar jsg | Theo de Raadt | |
| 2007-06-15 | keep trailing slashes in path normalization, as these might result in | Nikolay Sturm | |
| errors otherwise hidden by systrace noticed by naddy, ok ray on an earlier version of this diff | |||
| 2007-06-06 | don;t try to handle obsolete protocols, print functions so cosmetics only | Henning Brauer | |
| ok otto ray | |||
| 2007-05-31 | convert to new .Dd format; | Jason McIntyre | |
| 2007-05-29 | remove compat netbsd stuff | Otto Moerbeek | |
| 2007-05-15 | don't assume 4-byte aligned memory when intercepting a string | Nikolay Sturm | |
| this should get rid of systrace: intercept_get_string: ioctl: Invalid argument no objections from provos, ok otto | |||
| 2006-09-19 | Use S_IS* macros insted of masking with S_IF* flags. The latter may | Otto Moerbeek | |
| have multiple bits set, which leads to surprising results. Spotted by/partly from Paul Stoeber, more to come. ok ho@ miod@ hshoexer@ | |||
| 2006-08-14 | Adapt revision 1.18 change for symlink(2): | Ray Lai | |
| only resolve symlinks in the dirname of rename()'s arguments, but not in the filename ``looks sane to me'' sturm@, fixes espie@'s problem, ``Seems reasonable.'' provos@. | |||
| 2006-07-02 | sync with systrace 1.6d, keeping local changes | Nikolay Sturm | |
| tests and feedback by a few | |||
| 2006-06-30 | handcrafted depend and CLEANFILES no longer needed since this is now | Otto Moerbeek | |
| done by bsd.*.mk | |||
| 2006-06-10 | add a translation for sendmsg() | Nikolay Sturm | |
| from provos, with feedback from ray and pat | |||
| 2006-05-03 | be more clear about policy inheritance | Nikolay Sturm | |
| help and ok jmc, provos | |||
| 2006-05-02 | some type cleanup | Nikolay Sturm | |
| with feedback from kettenis | |||
| 2006-04-26 | ARGSUSED and a FALLTHROUGH to please lint | Nikolay Sturm | |
| ok deraadt | |||
| 2006-04-03 | add translation for mknod | Nikolay Sturm | |
| ok provos | |||
| 2006-03-25 | only resolve symlinks in the dirname of rename()'s arguments, | Nikolay Sturm | |
| but not in the filename ok provos, no objections from tedu (who doesn't use systrace) | |||
| 2006-03-18 | fix problems found by Coverity via NetBSD: | Robert Nagy | |
| - systrace.c: Don't try to dereference pw when it's NULL. Coverity CID 900 - parse.y: free allocated space on failure Coverity CID 1661 - policy.c: Change a return to "goto out" so that fclose will be called. Coverity CID 1881 ok sturm@, ray@ | |||
| 2006-03-12 | add a few new translations, partly from NetBSD | Nikolay Sturm | |
| ok provos@, deraadt@ | |||
| 2006-03-06 | convert permanent privilege revocation to use setresuid/setresgid; | Damien Miller | |
| ok henning@ | |||
| 2006-01-01 | add PTRACE and RTHREADS defines | Nikolay Sturm | |
| ok miod | |||
| 2005-05-03 | some snprintf() -> strlcpy to improve readibility (and speed?) | Nikolay Sturm | |
| from rohee@, ok millert@ before 3.7 | |||
| 2005-04-23 | -c option may take either integer or name, not just integer; | Jason McIntyre | |
| diff from ray; ok sturm@ | |||
| 2005-03-10 | wrap bind() to AF_UNIX with umask() to avoid race | Theo de Raadt | |
| 2004-07-09 | #ifdef hpux only for m68k or hppa; this needs a revisit since this shows | Theo de Raadt | |
| something flawed in the way that the emulation system calls are being handled | |||
| 2004-07-09 | oops committed the old version | Michael Shalayeff | |
| 2004-07-09 | better includes for syscalls from kernel | Michael Shalayeff | |
| 2004-07-07 | fix an issue when scripts are exec'd under systrace where | marius eriksen | |
| the argv[0] would be normalized, and hence break scripts that depend on how they were called. this fixes an issue in the ports builds. ok provos@ deraadt@; lots of testing during hackathon sturm@ naddy@ | |||
| 2004-06-24 | if we have detached after an exec, bail out early, and avoid a double free. | marius eriksen | |
| ok provos@, "works fine" sturm@ | |||
| 2004-06-23 | a few fixes to systrace | marius eriksen | |
| - add an exec message so that whenever a set-uid/gid process exec's a new image which we may control, the exec does not go by unnoticed. - take special care to check for P_SUGIDEXEC as well as P_SUGID, corresponding to the same changes that were made in the ptrace code a while ago ok niels@, sturm@; thanks to naddy for testing | |||
| 2004-03-30 | if a string considered a filename is too long, don't exit but just let | Nikolay Sturm | |
| the syscall fail, it might not actually be a filename fixes pr 3140, ok provos@ | |||
| 2004-02-01 | make documentation of cradle mode (-C) clearer, and give an example of why | Jason McIntyre | |
| it might be used; mostly based on sturm@'s explanation when i hassled him about it, and committed by niels@ to main systrace repository; | |||
| 2004-01-30 | The empty filename does not receive normalization. | Nikolay Sturm | |
| System calls are supposed to fail on it. from provos@, ok markus@ | |||
| 2004-01-23 | support for cradle mode by marius at monkey.org; cradle mode allows the | Nikolay Sturm | |
| systrace UI to be attached and re-attached, it also multiplexes across systrace process so that one UI can function as central notification from provos@, ok markus@ | |||
| 2004-01-07 | new command line option allows logging to stderr instead of syslog | Nikolay Sturm | |
| "looks good" provos@, ok markus@ | |||
| 2004-01-05 | include path fixes for gcc3. | Marc Espie | |
| tests otto@, okay millert@ | |||
| 2003-11-27 | permit trailing '$' in usernames, from Tom Cosgrove | Nikolay Sturm | |
| ok provos@, henning@ | |||
| 2003-11-23 | allow underscore in usernames, from Niels/NetBSD | Nikolay Sturm | |
| ok henning@ | |||
| 2003-11-20 | remove -Werror from userland builds, to give us a chance to | Anil Madhavapeddy | |
| use more verbose warning options if desired. ok millert@, henning@, david@ | |||
| 2003-11-20 | hyphenise compound adjective; from Jared Yanovich; | Jason McIntyre | |
| 2003-10-22 | from NetBSD: | Nikolay Sturm | |
| initialise an integer field with 0 instead of NULL ok provos, itojun, avsm, fgsch | |||
| 2003-10-18 | typos from Jared Yanovich; | Jason McIntyre | |
| 2003-10-08 | originally from cb@openbsd.org, adapted by provos | Nikolay Sturm | |
| itojun@ ok fix a race condition between path resolution in userland and the subsequent namei(): inform the kernel portion of valid filenames and then disallow symlink lookups for those filenames by means of a hook in namei(). with suggestions from provos@ also, add (currently unused) seqnr field to struct systrace_replace, from provos@ | |||
| 2003-09-04 | - use .Bk/.Ek | Jason McIntyre | |
| - kill bogus -offsets - escape `-' - .Ev for environment variables | |||
| 2003-08-23 | teach systrace about "aout" emul; henning@ ok. | Federico G. Schwindt | |
| 2003-08-20 | spelling; e@molioner.dk | Theo de Raadt | |
| 2003-08-04 | several diffs from Niels as applied to NetBSD | Nikolay Sturm | |
| monkey.org/NetBSD commit messages: - get rid of retarded CWD handling. CWD is fixed to the CWD of the systrace that started everything. - normalize file name function - normalize CWD for cases where CWD has a symlink in it. should solve problems where CWD policies would not match. - avoid warning due to name collision. - fixed contrived race condition during attachment; from marius@monkey.org itojun@ ok | |||
| 2003-07-19 | - sync with NetBSD or Niels' tarball where appropriate | Nikolay Sturm | |
| - keeps local changes - fixes a bug in profile feedback optimization and avoids symbol conflicts with errno - new feature: "ask" action itojun@ ok | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |