Age | Commit message (Collapse) | Author | |
---|---|---|---|
2002-06-07 | explain about permit[inherit] for execve | Niels Provos | |
2002-06-07 | use profiling to order filter lists more optimally. | Niels Provos | |
2002-06-06 | enable systrace; pointed out by openbsd@davidkrause.com | Niels Provos | |
2002-06-06 | Delete dublicate entry. Different patch from dfa@solo.ee applied. | Mike Pechkin | |
millert@ ok | |||
2002-06-06 | fix automatic policy generation for system calls that have the same args | Niels Provos | |
twice, like rename. problem found by gustavo | |||
2002-06-05 | append predicate, instead of prepending. makes rules sortable again. | Niels Provos | |
pointed out by dugsong@ | |||
2002-06-05 | support simple predicates to prefix rules. Allows global policies to be | Niels Provos | |
different for different users. | |||
2002-06-05 | dump policies only if user policy is specified. | Niels Provos | |
2002-06-05 | stab at describing grammar | Niels Provos | |
2002-06-05 | no special case of execve. | Niels Provos | |
2002-06-05 | proper handling for .y and .l such that dependancies get generated | Michael Shalayeff | |
2002-06-05 | rcsids | Michael Shalayeff | |
2002-06-05 | introduce an automatic policy generation mode. it creates a policy based | Niels Provos | |
on what the application tries to do. the policy can be refined further on. | |||
2002-06-05 | inpath logic, for example, filename inpath "$CWD" | Niels Provos | |
2002-06-05 | know about CWD. will make some filter rules simpler. | Niels Provos | |
2002-06-05 | My turn to help: | Mike Pechkin | |
o) start new sentence on a new line; | |||
2002-06-05 | document pgid usage; ok millert@ | Jason Peel | |
2002-06-04 | setup user systrace dir only if user policies are used. | Niels Provos | |
2002-06-04 | document | Niels Provos | |
2002-06-04 | log offending syscalls to syslog in automatic mode. dugsong@ | Niels Provos | |
2002-06-04 | proper copyright | Niels Provos | |
2002-06-04 | files section | Niels Provos | |
2002-06-04 | add flag to ignore user specified policies | Niels Provos | |
2002-06-04 | usage; fries@ | Niels Provos | |
2002-06-04 | spelling | Todd T. Fries | |
2002-06-04 | document | Niels Provos | |
2002-06-04 | guipath for getopt | Niels Provos | |
2002-06-04 | explicit path for notification tool xsystrace. | Niels Provos | |
2002-06-04 | first stab at man page. | Niels Provos | |
2002-06-04 | complain about missing device only once. from deraadt@ | Niels Provos | |
2002-06-04 | document origin of simplify_path | Niels Provos | |
2002-06-04 | KNF | Theo de Raadt | |
2002-06-04 | no absolute includes, changed to relatives; from deraadt@ | Niels Provos | |
2002-06-04 | __FUNCTION__ -> __func__ from espie@ | Niels Provos | |
2002-06-04 | no YFLAGS | Niels Provos | |
2002-06-04 | make it compile. | Niels Provos | |
2002-06-04 | lexer and parser | Niels Provos | |
2002-06-04 | initial import of systrace. don't touch this, more stuff coming in a while | Niels Provos | |
2002-05-31 | Don't include cases for characters not in optstring; ericj. Snuck in on my | Paul Janzen | |
last commit here. | |||
2002-05-30 | typo; moritz@jodeit.org | Theo de Raadt | |
2002-05-29 | Add a cast to keep time from overflowing. Checked by millert. | Hugh Graham | |
2002-05-27 | strlcpy | Theo de Raadt | |
2002-05-25 | typo fixes; S@mSmith.net | Theo de Raadt | |
2002-05-24 | examples subsection; s@msmith.net | Theo de Raadt | |
2002-05-16 | Xref netstart(8) instead of rc(8) now, PR #2657 | Miod Vallat | |
2002-05-09 | Remove setuid bit; non-root uses will have rsh(1) invoked on their behalf. | Todd C. Miller | |
This does mean that we cannot set IPTOS_THROUGHPUT. If this is a problem we may be able to add an option to rsh(1). | |||
2002-05-06 | Kill/adjust r(login|exec)d? references now that those are no longer in | Todd C. Miller | |
the tree. | |||
2002-05-06 | rlogin: Lived with Joy | Theo de Raadt | |
2002-05-04 | Clean up the logic in install_url(): | Kenneth R Westerback | |
a) Eliminate extraneous cat invocations that are piped to grep by simply calling grep with the file name. b) Eliminate the only use of isnumeric() by using a ksh'ism left exposed in sh: '+([0-9])'. Eliminate isnumeric(). c) Test for a http/ftp list index of '0' and treat as an out of range error rather than an IP address. d) Reorganize to make smaller and more clear. Add documentation to sh(1) for ksh patterns that are available. ok millert@, miod@ | |||
2002-04-29 | Typo; Brian Poole | Todd C. Miller | |