| Age | Commit message (Expand) | Author |
|---|
| 2015-10-18 | With TIOCSTI supported in pledge "tty proc", csh is good enough to run | Theo de Raadt |
| 2015-10-17 | add missing underscore; from theo buehler | Jason McIntyre |
| 2015-10-17 | Drop two useless defines. | mmcc |
| 2015-10-17 | Move a system header include from the global header (sh.h) into the | mmcc |
| 2015-10-17 | Change allocarray() to areallocarray(), a full reallocarray clone. All | mmcc |
| 2015-10-17 | Copy alloc()'s overflow check to aresize(). | mmcc |
| 2015-10-16 | Change x_do_ins()'s arg type from int to size_t for correctness's sake, | mmcc |
| 2015-10-16 | Move the overflow check to alloc() so that the link struct overhead can | mmcc |
| 2015-10-16 | Cast iscntrl()'s arg to unsigned char. | mmcc |
| 2015-10-16 | wrap a long line | Theo de Raadt |
| 2015-10-16 | Implement real "flock" request and add it to userland programs that | Todd C. Miller |
| 2015-10-16 | Add allocarray(), an overflow-safe allocation function. | mmcc |
| 2015-10-15 | Remove three distracting aliases for NULL. | mmcc |
| 2015-10-15 | Remove an unused included header (sys/stat.h). | mmcc |
| 2015-10-15 | Introduce an unsigned char variable for the ctype function calls. | mmcc |
| 2015-10-14 | Use a strict $PATH of "/usr/bin:/usr/local/bin" to run the (de)compressors | Theo de Raadt |
| 2015-10-13 | revert previous. changes the behaviour of: | Daniel Dickman |
| 2015-10-12 | reenable pledge(2) on pax, but only if pmode isn't in use or if action | Sebastien Marie |
| 2015-10-12 | indent the builtin text a little, for naddy; | Jason McIntyre |
| 2015-10-12 | Revert the pledge() call on pax/ar_io.c for now. | Sebastien Marie |
| 2015-10-12 | preservation modes can adjust setugid bits, so no pledge is possible. | Theo de Raadt |
| 2015-10-11 | Don't return errno from main() | Philip Guenther |
| 2015-10-11 | pledge "stdio tty" works once the kernel allows TIOCGWINSZ. Do the pledge | Theo de Raadt |
| 2015-10-11 | Don't allow "rm -rf /" | Daniel Dickman |
| 2015-10-10 | Pledge that ln only needs "stdio rpath cpath". | Doug Hogan |
| 2015-10-10 | Add a define for the invalid state, from mksh via Michael McConville. | Nicholas Marriott |
| 2015-10-10 | Kill pledges to only use "stdio proc". | Doug Hogan |
| 2015-10-10 | normalize a few more tame request orderings, to help review | Theo de Raadt |
| 2015-10-10 | normalize the ordering of tame requests (particularily, "rpath wpath cpath", | Theo de Raadt |
| 2015-10-10 | Replace calls to x_emacs_putbuf() with x_do_ins() since all | Todd C. Miller |
| 2015-10-10 | Unused macros; from Michael McConville. | Nicholas Marriott |
| 2015-10-10 | Move more declarations out of proto.h into better headers, from Michael | Nicholas Marriott |
| 2015-10-10 | ksh can run with pledge "stdio rpath wpath cpath getpw fattr proc exec tty" | Theo de Raadt |
| 2015-10-09 | The variable errmsg can be static in main.c if code in re.c uses an own | Tobias Stoeckmann |
| 2015-10-09 | Define functions as static when they are not used outside their own c-files. | Tobias Stoeckmann |
| 2015-10-09 | Lexer states are not needed outside of lex.c. | Todd C. Miller |
| 2015-10-09 | Mark static globals that are only used in their respective .c files. | Todd C. Miller |
| 2015-10-09 | remove null check before afree. from Michael McConville | Ted Unangst |
| 2015-10-09 | pare down the readme so as to not imply we are tracking upstream. | Ted Unangst |
| 2015-10-09 | Change all tame callers to namechange to pledge(2). | Theo de Raadt |
| 2015-10-08 | stop trying to gift history files to the original owner. instead, don't | Ted Unangst |
| 2015-10-08 | little cleanup from Michael McConville, mostly related to stale comments. | Ted Unangst |
| 2015-10-08 | the -P flag overwrites files, so it needs tame "stdio rpath wpath cpath". | Theo de Raadt |
| 2015-10-08 | Try again. Both -R and -p prevent use of tame, but other cases can use it. | Theo de Raadt |
| 2015-10-08 | ah, fchflags. We will come back to this issue later | Theo de Raadt |
| 2015-10-07 | tame "stdio cpath". The cpath is for rmdir(). Tame bundles all the system | Theo de Raadt |
| 2015-10-07 | We cannot tame if -R is specified, because mknod and mkfifo may be called. | Theo de Raadt |
| 2015-10-07 | tame "stdio cpath rpath fattr", unless mkdir -m is passed a mode which | Theo de Raadt |
| 2015-10-07 | tame "stdio rpath wpath". rpath is for localtime() and mktime(), | Theo de Raadt |
| 2015-10-07 | tame "stdio rpath wpath cpath proc exec tty". proc and exec because ed | Theo de Raadt |
