Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-07-09 | #ifdef hpux only for m68k or hppa; this needs a revisit since this shows | Theo de Raadt | |
something flawed in the way that the emulation system calls are being handled | |||
2004-07-09 | oops committed the old version | Michael Shalayeff | |
2004-07-09 | better includes for syscalls from kernel | Michael Shalayeff | |
2004-07-07 | fix an issue when scripts are exec'd under systrace where | marius eriksen | |
the argv[0] would be normalized, and hence break scripts that depend on how they were called. this fixes an issue in the ports builds. ok provos@ deraadt@; lots of testing during hackathon sturm@ naddy@ | |||
2004-06-24 | if we have detached after an exec, bail out early, and avoid a double free. | marius eriksen | |
ok provos@, "works fine" sturm@ | |||
2004-06-23 | a few fixes to systrace | marius eriksen | |
- add an exec message so that whenever a set-uid/gid process exec's a new image which we may control, the exec does not go by unnoticed. - take special care to check for P_SUGIDEXEC as well as P_SUGID, corresponding to the same changes that were made in the ptrace code a while ago ok niels@, sturm@; thanks to naddy for testing | |||
2004-03-30 | if a string considered a filename is too long, don't exit but just let | Nikolay Sturm | |
the syscall fail, it might not actually be a filename fixes pr 3140, ok provos@ | |||
2004-02-01 | make documentation of cradle mode (-C) clearer, and give an example of why | Jason McIntyre | |
it might be used; mostly based on sturm@'s explanation when i hassled him about it, and committed by niels@ to main systrace repository; | |||
2004-01-30 | The empty filename does not receive normalization. | Nikolay Sturm | |
System calls are supposed to fail on it. from provos@, ok markus@ | |||
2004-01-23 | support for cradle mode by marius at monkey.org; cradle mode allows the | Nikolay Sturm | |
systrace UI to be attached and re-attached, it also multiplexes across systrace process so that one UI can function as central notification from provos@, ok markus@ | |||
2004-01-07 | new command line option allows logging to stderr instead of syslog | Nikolay Sturm | |
"looks good" provos@, ok markus@ | |||
2004-01-05 | include path fixes for gcc3. | Marc Espie | |
tests otto@, okay millert@ | |||
2003-11-27 | permit trailing '$' in usernames, from Tom Cosgrove | Nikolay Sturm | |
ok provos@, henning@ | |||
2003-11-23 | allow underscore in usernames, from Niels/NetBSD | Nikolay Sturm | |
ok henning@ | |||
2003-11-20 | remove -Werror from userland builds, to give us a chance to | Anil Madhavapeddy | |
use more verbose warning options if desired. ok millert@, henning@, david@ | |||
2003-11-20 | hyphenise compound adjective; from Jared Yanovich; | Jason McIntyre | |
2003-10-22 | from NetBSD: | Nikolay Sturm | |
initialise an integer field with 0 instead of NULL ok provos, itojun, avsm, fgsch | |||
2003-10-18 | typos from Jared Yanovich; | Jason McIntyre | |
2003-10-08 | originally from cb@openbsd.org, adapted by provos | Nikolay Sturm | |
itojun@ ok fix a race condition between path resolution in userland and the subsequent namei(): inform the kernel portion of valid filenames and then disallow symlink lookups for those filenames by means of a hook in namei(). with suggestions from provos@ also, add (currently unused) seqnr field to struct systrace_replace, from provos@ | |||
2003-09-04 | - use .Bk/.Ek | Jason McIntyre | |
- kill bogus -offsets - escape `-' - .Ev for environment variables | |||
2003-08-23 | teach systrace about "aout" emul; henning@ ok. | Federico G. Schwindt | |
2003-08-20 | spelling; e@molioner.dk | Theo de Raadt | |
2003-08-04 | several diffs from Niels as applied to NetBSD | Nikolay Sturm | |
monkey.org/NetBSD commit messages: - get rid of retarded CWD handling. CWD is fixed to the CWD of the systrace that started everything. - normalize file name function - normalize CWD for cases where CWD has a symlink in it. should solve problems where CWD policies would not match. - avoid warning due to name collision. - fixed contrived race condition during attachment; from marius@monkey.org itojun@ ok | |||
2003-07-19 | - sync with NetBSD or Niels' tarball where appropriate | Nikolay Sturm | |
- keeps local changes - fixes a bug in profile feedback optimization and avoids symbol conflicts with errno - new feature: "ask" action itojun@ ok | |||
2003-06-24 | decruft | Michael Shalayeff | |
2003-06-19 | remove unused code which allocated useless memory (which was not freed) | Peter Valchev | |
ok provos itojun | |||
2003-06-16 | - limited number of processes per systrace | Jun-ichiro itojun Hagino | |
- escape fixes for special characters markus, sturm ok. from provos | |||
2003-06-02 | prevents systrace from referencing freed memory; provos | Jun-ichiro itojun Hagino | |
2003-05-29 | >permit numberic values for uid and gid; allow "<" and ">" for less and | Jun-ichiro itojun Hagino | |
>greate; requested by dugsong@, strum ok | |||
2003-05-17 | pull in a bugfix from systrace-current to let systrace deal with creating | Nikolay Sturm | |
directories correctly OK itojun@, thanks to niels for the help | |||
2003-04-24 | fix for EOF in interactive policy generation. | Mike Pechkin | |
millert@ provos@ | |||
2003-04-17 | use asprintf; fix (remove) some incorrectly sized buffers in the process | Peter Valchev | |
help & ok millert, miod, deraadt, tedu | |||
2003-04-14 | room for NUL; tdeval | Theo de Raadt | |
2003-04-06 | strlcpy; tedu ok | Theo de Raadt | |
2003-03-28 | little cleanup; | Jason McIntyre | |
systrace(1) ok provos@ | |||
2003-02-20 | Fix a crash in the systrace found by form@ | Artur Grabowski | |
One is a kernel fix that changes the lockin and one is a userland fix that prevents dereferencing a freed pointer. From provos deraadt@ ok | |||
2003-02-18 | intial -> initial; | Jason McIntyre | |
the great intial witch hunt, as prompted by tdeval@ os-aix-dso.c: ok henning@ ab.C: ok drahn@ | |||
2002-12-12 | Allow the log directive to work for non-translated syscalls as well. | Anil Madhavapeddy | |
provos ok | |||
2002-12-11 | rename log->dolog, from thorpej@netbsd, ok provos | Anil Madhavapeddy | |
2002-12-09 | Restriction that -c args must be numeric. Motivation on privilege elevation. | Ian Darwin | |
Environment variables (HOME,USER,CWD). File name details. Style fixes. ok provos@ | |||
2002-12-09 | add support for regular expressions and pidname translations. from provos | Jun-ichiro itojun Hagino | |
2002-12-09 | better parsing of # comments. from provos | Jun-ichiro itojun Hagino | |
2002-12-09 | prevent the use of permit for aliases. from provos | Jun-ichiro itojun Hagino | |
2002-12-05 | spelling; niels ok. | Federico G. Schwindt | |
2002-12-04 | rename to a new ioctl | Michael Shalayeff | |
2002-11-26 | avoid symbol conflict with "errno" | Jun-ichiro itojun Hagino | |
2002-11-26 | performance improvement by omitting a redundant getcwd. | Jun-ichiro itojun Hagino | |
from provos | |||
2002-11-26 | error should go to stderr. from provos | Jun-ichiro itojun Hagino | |
2002-11-16 | rename translation tables. from provos | Jun-ichiro itojun Hagino | |
2002-11-15 | no need to check trans_size. from provos | Jun-ichiro itojun Hagino | |