summaryrefslogtreecommitdiff
path: root/bin
AgeCommit message (Collapse)Author
2002-06-07explain about permit[inherit] for execveNiels Provos
2002-06-07use profiling to order filter lists more optimally.Niels Provos
2002-06-06enable systrace; pointed out by openbsd@davidkrause.comNiels Provos
2002-06-06Delete dublicate entry. Different patch from dfa@solo.ee applied.Mike Pechkin
millert@ ok
2002-06-06fix automatic policy generation for system calls that have the same argsNiels Provos
twice, like rename. problem found by gustavo
2002-06-05append predicate, instead of prepending. makes rules sortable again.Niels Provos
pointed out by dugsong@
2002-06-05support simple predicates to prefix rules. Allows global policies to beNiels Provos
different for different users.
2002-06-05dump policies only if user policy is specified.Niels Provos
2002-06-05stab at describing grammarNiels Provos
2002-06-05no special case of execve.Niels Provos
2002-06-05proper handling for .y and .l such that dependancies get generatedMichael Shalayeff
2002-06-05rcsidsMichael Shalayeff
2002-06-05introduce an automatic policy generation mode. it creates a policy basedNiels Provos
on what the application tries to do. the policy can be refined further on.
2002-06-05inpath logic, for example, filename inpath "$CWD"Niels Provos
2002-06-05know about CWD. will make some filter rules simpler.Niels Provos
2002-06-05My turn to help:Mike Pechkin
o) start new sentence on a new line;
2002-06-05document pgid usage; ok millert@Jason Peel
2002-06-04setup user systrace dir only if user policies are used.Niels Provos
2002-06-04documentNiels Provos
2002-06-04log offending syscalls to syslog in automatic mode. dugsong@Niels Provos
2002-06-04proper copyrightNiels Provos
2002-06-04files sectionNiels Provos
2002-06-04add flag to ignore user specified policiesNiels Provos
2002-06-04usage; fries@Niels Provos
2002-06-04spellingTodd T. Fries
2002-06-04documentNiels Provos
2002-06-04guipath for getoptNiels Provos
2002-06-04explicit path for notification tool xsystrace.Niels Provos
2002-06-04first stab at man page.Niels Provos
2002-06-04complain about missing device only once. from deraadt@Niels Provos
2002-06-04document origin of simplify_pathNiels Provos
2002-06-04KNFTheo de Raadt
2002-06-04no absolute includes, changed to relatives; from deraadt@Niels Provos
2002-06-04__FUNCTION__ -> __func__ from espie@Niels Provos
2002-06-04no YFLAGSNiels Provos
2002-06-04make it compile.Niels Provos
2002-06-04lexer and parserNiels Provos
2002-06-04initial import of systrace. don't touch this, more stuff coming in a whileNiels Provos
2002-05-31Don't include cases for characters not in optstring; ericj. Snuck in on myPaul Janzen
last commit here.
2002-05-30typo; moritz@jodeit.orgTheo de Raadt
2002-05-29Add a cast to keep time from overflowing. Checked by millert.Hugh Graham
2002-05-27strlcpyTheo de Raadt
2002-05-25typo fixes; S@mSmith.netTheo de Raadt
2002-05-24examples subsection; s@msmith.netTheo de Raadt
2002-05-16Xref netstart(8) instead of rc(8) now, PR #2657Miod Vallat
2002-05-09Remove setuid bit; non-root uses will have rsh(1) invoked on their behalf.Todd C. Miller
This does mean that we cannot set IPTOS_THROUGHPUT. If this is a problem we may be able to add an option to rsh(1).
2002-05-06Kill/adjust r(login|exec)d? references now that those are no longer inTodd C. Miller
the tree.
2002-05-06rlogin: Lived with JoyTheo de Raadt
2002-05-04Clean up the logic in install_url():Kenneth R Westerback
a) Eliminate extraneous cat invocations that are piped to grep by simply calling grep with the file name. b) Eliminate the only use of isnumeric() by using a ksh'ism left exposed in sh: '+([0-9])'. Eliminate isnumeric(). c) Test for a http/ftp list index of '0' and treat as an out of range error rather than an IP address. d) Reorganize to make smaller and more clear. Add documentation to sh(1) for ksh patterns that are available. ok millert@, miod@
2002-04-29Typo; Brian PooleTodd C. Miller