summaryrefslogtreecommitdiff
path: root/bin
AgeCommit message (Collapse)Author
2002-06-09rm trailing whitespaceTodd T. Fries
2002-06-09some knf.Todd T. Fries
2002-06-09some knf.Todd T. Fries
2002-06-09spelling; moritz@jodeit.orgTheo de Raadt
2002-06-09allow numeric group ID (group ID appear in /etc/passwd, but not in /etc/group)Jun-ichiro itojun Hagino
niels ok
2002-06-09strlcpy fix, PR 2727Jun-ichiro itojun Hagino
2002-06-08This doesn't need to be setgid operator; it was only set so usersAngelos D. Keromytis
could do "df /dev/rwd0a" or some such, but arguably only operators (or root) care about this, and they should already be on the operator group.
2002-06-08Use KVM_NO_FILES and remove the setgid.Artur Grabowski
2002-06-07explain about permit[inherit] for execveNiels Provos
2002-06-07use profiling to order filter lists more optimally.Niels Provos
2002-06-06enable systrace; pointed out by openbsd@davidkrause.comNiels Provos
2002-06-06Delete dublicate entry. Different patch from dfa@solo.ee applied.Mike Pechkin
millert@ ok
2002-06-06fix automatic policy generation for system calls that have the same argsNiels Provos
twice, like rename. problem found by gustavo
2002-06-05append predicate, instead of prepending. makes rules sortable again.Niels Provos
pointed out by dugsong@
2002-06-05support simple predicates to prefix rules. Allows global policies to beNiels Provos
different for different users.
2002-06-05dump policies only if user policy is specified.Niels Provos
2002-06-05stab at describing grammarNiels Provos
2002-06-05no special case of execve.Niels Provos
2002-06-05proper handling for .y and .l such that dependancies get generatedMichael Shalayeff
2002-06-05rcsidsMichael Shalayeff
2002-06-05introduce an automatic policy generation mode. it creates a policy basedNiels Provos
on what the application tries to do. the policy can be refined further on.
2002-06-05inpath logic, for example, filename inpath "$CWD"Niels Provos
2002-06-05know about CWD. will make some filter rules simpler.Niels Provos
2002-06-05My turn to help:Mike Pechkin
o) start new sentence on a new line;
2002-06-05document pgid usage; ok millert@Jason Peel
2002-06-04setup user systrace dir only if user policies are used.Niels Provos
2002-06-04documentNiels Provos
2002-06-04log offending syscalls to syslog in automatic mode. dugsong@Niels Provos
2002-06-04proper copyrightNiels Provos
2002-06-04files sectionNiels Provos
2002-06-04add flag to ignore user specified policiesNiels Provos
2002-06-04usage; fries@Niels Provos
2002-06-04spellingTodd T. Fries
2002-06-04documentNiels Provos
2002-06-04guipath for getoptNiels Provos
2002-06-04explicit path for notification tool xsystrace.Niels Provos
2002-06-04first stab at man page.Niels Provos
2002-06-04complain about missing device only once. from deraadt@Niels Provos
2002-06-04document origin of simplify_pathNiels Provos
2002-06-04KNFTheo de Raadt
2002-06-04no absolute includes, changed to relatives; from deraadt@Niels Provos
2002-06-04__FUNCTION__ -> __func__ from espie@Niels Provos
2002-06-04no YFLAGSNiels Provos
2002-06-04make it compile.Niels Provos
2002-06-04lexer and parserNiels Provos
2002-06-04initial import of systrace. don't touch this, more stuff coming in a whileNiels Provos
2002-05-31Don't include cases for characters not in optstring; ericj. Snuck in on myPaul Janzen
last commit here.
2002-05-30typo; moritz@jodeit.orgTheo de Raadt
2002-05-29Add a cast to keep time from overflowing. Checked by millert.Hugh Graham
2002-05-27strlcpyTheo de Raadt