summaryrefslogtreecommitdiff
path: root/bin/systrace
AgeCommit message (Collapse)Author
2005-05-03some snprintf() -> strlcpy to improve readibility (and speed?)Nikolay Sturm
from rohee@, ok millert@ before 3.7
2005-04-23-c option may take either integer or name, not just integer;Jason McIntyre
diff from ray; ok sturm@
2005-03-10wrap bind() to AF_UNIX with umask() to avoid raceTheo de Raadt
2004-07-09#ifdef hpux only for m68k or hppa; this needs a revisit since this showsTheo de Raadt
something flawed in the way that the emulation system calls are being handled
2004-07-09oops committed the old versionMichael Shalayeff
2004-07-09better includes for syscalls from kernelMichael Shalayeff
2004-07-07fix an issue when scripts are exec'd under systrace wheremarius eriksen
the argv[0] would be normalized, and hence break scripts that depend on how they were called. this fixes an issue in the ports builds. ok provos@ deraadt@; lots of testing during hackathon sturm@ naddy@
2004-06-24if we have detached after an exec, bail out early, and avoid a double free.marius eriksen
ok provos@, "works fine" sturm@
2004-06-23a few fixes to systracemarius eriksen
- add an exec message so that whenever a set-uid/gid process exec's a new image which we may control, the exec does not go by unnoticed. - take special care to check for P_SUGIDEXEC as well as P_SUGID, corresponding to the same changes that were made in the ptrace code a while ago ok niels@, sturm@; thanks to naddy for testing
2004-03-30if a string considered a filename is too long, don't exit but just letNikolay Sturm
the syscall fail, it might not actually be a filename fixes pr 3140, ok provos@
2004-02-01make documentation of cradle mode (-C) clearer, and give an example of whyJason McIntyre
it might be used; mostly based on sturm@'s explanation when i hassled him about it, and committed by niels@ to main systrace repository;
2004-01-30The empty filename does not receive normalization.Nikolay Sturm
System calls are supposed to fail on it. from provos@, ok markus@
2004-01-23support for cradle mode by marius at monkey.org; cradle mode allows theNikolay Sturm
systrace UI to be attached and re-attached, it also multiplexes across systrace process so that one UI can function as central notification from provos@, ok markus@
2004-01-07new command line option allows logging to stderr instead of syslogNikolay Sturm
"looks good" provos@, ok markus@
2004-01-05include path fixes for gcc3.Marc Espie
tests otto@, okay millert@
2003-11-27permit trailing '$' in usernames, from Tom CosgroveNikolay Sturm
ok provos@, henning@
2003-11-23allow underscore in usernames, from Niels/NetBSDNikolay Sturm
ok henning@
2003-11-20remove -Werror from userland builds, to give us a chance toAnil Madhavapeddy
use more verbose warning options if desired. ok millert@, henning@, david@
2003-11-20hyphenise compound adjective; from Jared Yanovich;Jason McIntyre
2003-10-22from NetBSD:Nikolay Sturm
initialise an integer field with 0 instead of NULL ok provos, itojun, avsm, fgsch
2003-10-18typos from Jared Yanovich;Jason McIntyre
2003-10-08originally from cb@openbsd.org, adapted by provosNikolay Sturm
itojun@ ok fix a race condition between path resolution in userland and the subsequent namei(): inform the kernel portion of valid filenames and then disallow symlink lookups for those filenames by means of a hook in namei(). with suggestions from provos@ also, add (currently unused) seqnr field to struct systrace_replace, from provos@
2003-09-04 - use .Bk/.EkJason McIntyre
- kill bogus -offsets - escape `-' - .Ev for environment variables
2003-08-23teach systrace about "aout" emul; henning@ ok.Federico G. Schwindt
2003-08-20spelling; e@molioner.dkTheo de Raadt
2003-08-04several diffs from Niels as applied to NetBSDNikolay Sturm
monkey.org/NetBSD commit messages: - get rid of retarded CWD handling. CWD is fixed to the CWD of the systrace that started everything. - normalize file name function - normalize CWD for cases where CWD has a symlink in it. should solve problems where CWD policies would not match. - avoid warning due to name collision. - fixed contrived race condition during attachment; from marius@monkey.org itojun@ ok
2003-07-19- sync with NetBSD or Niels' tarball where appropriateNikolay Sturm
- keeps local changes - fixes a bug in profile feedback optimization and avoids symbol conflicts with errno - new feature: "ask" action itojun@ ok
2003-06-24decruftMichael Shalayeff
2003-06-19remove unused code which allocated useless memory (which was not freed)Peter Valchev
ok provos itojun
2003-06-16- limited number of processes per systraceJun-ichiro itojun Hagino
- escape fixes for special characters markus, sturm ok. from provos
2003-06-02prevents systrace from referencing freed memory; provosJun-ichiro itojun Hagino
2003-05-29>permit numberic values for uid and gid; allow "<" and ">" for less andJun-ichiro itojun Hagino
>greate; requested by dugsong@, strum ok
2003-05-17pull in a bugfix from systrace-current to let systrace deal with creatingNikolay Sturm
directories correctly OK itojun@, thanks to niels for the help
2003-04-24fix for EOF in interactive policy generation.Mike Pechkin
millert@ provos@
2003-04-17use asprintf; fix (remove) some incorrectly sized buffers in the processPeter Valchev
help & ok millert, miod, deraadt, tedu
2003-04-14room for NUL; tdevalTheo de Raadt
2003-04-06strlcpy; tedu okTheo de Raadt
2003-03-28little cleanup;Jason McIntyre
systrace(1) ok provos@
2003-02-20Fix a crash in the systrace found by form@Artur Grabowski
One is a kernel fix that changes the lockin and one is a userland fix that prevents dereferencing a freed pointer. From provos deraadt@ ok
2003-02-18intial -> initial;Jason McIntyre
the great intial witch hunt, as prompted by tdeval@ os-aix-dso.c: ok henning@ ab.C: ok drahn@
2002-12-12Allow the log directive to work for non-translated syscalls as well.Anil Madhavapeddy
provos ok
2002-12-11rename log->dolog, from thorpej@netbsd, ok provosAnil Madhavapeddy
2002-12-09Restriction that -c args must be numeric. Motivation on privilege elevation.Ian Darwin
Environment variables (HOME,USER,CWD). File name details. Style fixes. ok provos@
2002-12-09add support for regular expressions and pidname translations. from provosJun-ichiro itojun Hagino
2002-12-09better parsing of # comments. from provosJun-ichiro itojun Hagino
2002-12-09prevent the use of permit for aliases. from provosJun-ichiro itojun Hagino
2002-12-05spelling; niels ok.Federico G. Schwindt
2002-12-04rename to a new ioctlMichael Shalayeff
2002-11-26avoid symbol conflict with "errno"Jun-ichiro itojun Hagino
2002-11-26performance improvement by omitting a redundant getcwd.Jun-ichiro itojun Hagino
from provos