summaryrefslogtreecommitdiff
path: root/bin
AgeCommit message (Collapse)Author
2002-10-31typo, reported by avsm@openbsdJun-ichiro itojun Hagino
2002-10-28Seeking on a character device works fine.Todd C. Miller
2002-10-28add missing "break". Alexander YurchenkoJun-ichiro itojun Hagino
2002-10-23Move a cast from LHS to RHS to quiet a "cast from pointer to integerTodd C. Miller
of different size" warning on 64-bit platforms.
2002-10-18Pull in some changes from NetBSDTodd C. Miller
o When extracting GNU tar archives, honor @LongLink long links/files o Add an option to prevent pax from prompting for the next volume upon premature end of archive.
2002-10-17little cleanup (intercept_getpid dies within the function on error).Jun-ichiro itojun Hagino
from provos
2002-10-16sprinkle const; mostly from NetBSDTodd C. Miller
2002-10-16Slight KNF and return -1 on no match, not EOFTodd C. Miller
2002-10-16Fix comment typos; most from NetBSD and FreeBSDTodd C. Miller
2002-10-16kill registerTodd C. Miller
2002-10-16Sync date parsing code with that in date(1) (which is obviously what pax'sTodd C. Miller
date code was based on). It is now possible to specify 4 digit years.
2002-10-16support for privilege elevation.Jun-ichiro itojun Hagino
with privilege elevation no suid or sgid binaries are necessary any longer. Applications can be executed completely unprivileged. Systrace raises the privileges for a single system call depending on the configured policy. Idea from discussions with Perry Metzger, Dug Song and Marcus Watts. from provos
2002-10-16translation for socket system callJun-ichiro itojun Hagino
from provos
2002-10-16correctly evaluate group predicates.Jun-ichiro itojun Hagino
afrom provos
2002-10-16enable meta key in emacs mode for 7-bit locales; provos@Todd C. Miller
2002-10-15Time ranges were documented incorrectly; Christian von RoquesTodd C. Miller
We should probably add support for specifying the century too...
2002-10-09predicates are part of the grammar now; in non-root case, predicates areJun-ichiro itojun Hagino
evaluated only once; in root case, predicates and variable expansion are dynamic. from provos
2002-10-08"output" is a pointer of size "outlen", so use outlen instead ofJun-ichiro itojun Hagino
sizeof(output) From "Vincent Labrecque" <vincent@psyfreaks.ca>
2002-10-08assume that inserting a template implies permit for the currentJun-ichiro itojun Hagino
syscall from provos
2002-10-07int -> uid_tVincent Labrecque
ok millert
2002-10-04wrong word; cjeker@diehard.n-r-g.comTheo de Raadt
2002-09-30When using "nl" as an argument to .Fl, escape nl to make it literal,Todd C. Miller
else it is interpreted as a command and doesn't format correctly. deraadt@ OK
2002-09-30fix return value; from marius@umich.edu via provosJun-ichiro itojun Hagino
2002-09-23support for templates. they allow fast generation of new policies. anJun-ichiro itojun Hagino
appropriate template can be inserted during initial policy generation. from provos
2002-09-18fix Xr refs; frisco@blackant.netTheo de Raadt
2002-09-17split white space and single line policy processing into separateJun-ichiro itojun Hagino
functions. from provos
2002-09-17daemon should not change the directory. from provosJun-ichiro itojun Hagino
2002-09-16periodically save policies that have been modified. from provosJun-ichiro itojun Hagino
>here is a diff that will cause systrace to periodically save policies >that have been modified. Useful if you run systrace on an xterm and >kill it accidently. Or other applications like opera that are long >running and can cause weird crashes.
2002-09-06standalone ; at top scope is illegal in ansi cTheo de Raadt
2002-09-06no , at end of enumTheo de Raadt
2002-09-06cast nicely, for cbc_decode() and cbc_encode()Theo de Raadt
2002-09-06do not return voidTheo de Raadt
2002-09-06KNFTheo de Raadt
2002-09-04toast uprocp format keyword; peterw@ifost.org.auTheo de Raadt
2002-08-31Unbreak. We have situations where last space in the line is required.Mike Pechkin
From dfa@openbsd.ru
2002-08-30allow # in system call name. remove trailing white space.Jun-ichiro itojun Hagino
from provos
2002-08-28avoid symbol conflict (errno)Jun-ichiro itojun Hagino
2002-08-28fix systrace with chroot. from provosJun-ichiro itojun Hagino
2002-08-20Fix error stringJason Wright
2002-08-12Swap args to calloc(3) so they are in the correct order; art@ ok.Aaron Campbell
2002-08-11enable COMPLEX_HISTORY. sh/ksh history will now workMarco S Hyman
as described in the man page. OK millert@
2002-08-08no \n in errNiels Provos
2002-08-08if getcwd fails and we continue dont restcwd.Niels Provos
2002-08-07deal better with interrupted system callsNiels Provos
2002-08-07typoVincent Labrecque
ok provos@
2002-08-05allow to specify an alternate directory for policy loading and writingNiels Provos
2002-08-05uid and gid are not guaranteed to be aligned on a register_t sized boundary.Jason Wright
Use a temporary location and then copy the value into place. provos ok.
2002-08-05increase buffer size for getstring, useful for execve arguments.Niels Provos
intercept_filename deals better with symlinked last component lookups. change some translations to use unlinkname.
2002-08-05different translation for lstatNiels Provos
2002-08-04keep track of ppid and allow matching rules to be logged via syslog.Niels Provos