summaryrefslogtreecommitdiff
path: root/bin
AgeCommit message (Collapse)Author
2002-12-12Allow the log directive to work for non-translated syscalls as well.Anil Madhavapeddy
provos ok
2002-12-11rename log->dolog, from thorpej@netbsd, ok provosAnil Madhavapeddy
2002-12-09Restriction that -c args must be numeric. Motivation on privilege elevation.Ian Darwin
Environment variables (HOME,USER,CWD). File name details. Style fixes. ok provos@
2002-12-09add support for regular expressions and pidname translations. from provosJun-ichiro itojun Hagino
2002-12-09better parsing of # comments. from provosJun-ichiro itojun Hagino
2002-12-09prevent the use of permit for aliases. from provosJun-ichiro itojun Hagino
2002-12-05spelling; niels ok.Federico G. Schwindt
2002-12-04rename to a new ioctlMichael Shalayeff
2002-11-29inconsistant spelling; torh@bogus.netTheo de Raadt
2002-11-29Foward; torh@bogus.netTheo de Raadt
2002-11-27Make fc -e work in "sh-mode" (shell invoked as /bin/sh or -o sh option)Peter Valchev
as well; matches Solaris. "can't hurt anything" marc@ Original report from PR user/2883
2002-11-26avoid symbol conflict with "errno"Jun-ichiro itojun Hagino
2002-11-26performance improvement by omitting a redundant getcwd.Jun-ichiro itojun Hagino
from provos
2002-11-26error should go to stderr. from provosJun-ichiro itojun Hagino
2002-11-16rename translation tables. from provosJun-ichiro itojun Hagino
2002-11-15no need to check trans_size. from provosJun-ichiro itojun Hagino
2002-11-14use $ or # before commands in examplesTheo de Raadt
2002-11-12fix bug in determining execve name. from provosJun-ichiro itojun Hagino
2002-11-09doh, better now.Federico G. Schwindt
2002-11-09uucp(1) doesn't exist anymore.Federico G. Schwindt
2002-10-31typo, reported by avsm@openbsdJun-ichiro itojun Hagino
2002-10-28Seeking on a character device works fine.Todd C. Miller
2002-10-28add missing "break". Alexander YurchenkoJun-ichiro itojun Hagino
2002-10-23Move a cast from LHS to RHS to quiet a "cast from pointer to integerTodd C. Miller
of different size" warning on 64-bit platforms.
2002-10-18Pull in some changes from NetBSDTodd C. Miller
o When extracting GNU tar archives, honor @LongLink long links/files o Add an option to prevent pax from prompting for the next volume upon premature end of archive.
2002-10-17little cleanup (intercept_getpid dies within the function on error).Jun-ichiro itojun Hagino
from provos
2002-10-16sprinkle const; mostly from NetBSDTodd C. Miller
2002-10-16Slight KNF and return -1 on no match, not EOFTodd C. Miller
2002-10-16Fix comment typos; most from NetBSD and FreeBSDTodd C. Miller
2002-10-16kill registerTodd C. Miller
2002-10-16Sync date parsing code with that in date(1) (which is obviously what pax'sTodd C. Miller
date code was based on). It is now possible to specify 4 digit years.
2002-10-16support for privilege elevation.Jun-ichiro itojun Hagino
with privilege elevation no suid or sgid binaries are necessary any longer. Applications can be executed completely unprivileged. Systrace raises the privileges for a single system call depending on the configured policy. Idea from discussions with Perry Metzger, Dug Song and Marcus Watts. from provos
2002-10-16translation for socket system callJun-ichiro itojun Hagino
from provos
2002-10-16correctly evaluate group predicates.Jun-ichiro itojun Hagino
afrom provos
2002-10-16enable meta key in emacs mode for 7-bit locales; provos@Todd C. Miller
2002-10-15Time ranges were documented incorrectly; Christian von RoquesTodd C. Miller
We should probably add support for specifying the century too...
2002-10-09predicates are part of the grammar now; in non-root case, predicates areJun-ichiro itojun Hagino
evaluated only once; in root case, predicates and variable expansion are dynamic. from provos
2002-10-08"output" is a pointer of size "outlen", so use outlen instead ofJun-ichiro itojun Hagino
sizeof(output) From "Vincent Labrecque" <vincent@psyfreaks.ca>
2002-10-08assume that inserting a template implies permit for the currentJun-ichiro itojun Hagino
syscall from provos
2002-10-07int -> uid_tVincent Labrecque
ok millert
2002-10-04wrong word; cjeker@diehard.n-r-g.comTheo de Raadt
2002-09-30When using "nl" as an argument to .Fl, escape nl to make it literal,Todd C. Miller
else it is interpreted as a command and doesn't format correctly. deraadt@ OK
2002-09-30fix return value; from marius@umich.edu via provosJun-ichiro itojun Hagino
2002-09-23support for templates. they allow fast generation of new policies. anJun-ichiro itojun Hagino
appropriate template can be inserted during initial policy generation. from provos
2002-09-18fix Xr refs; frisco@blackant.netTheo de Raadt
2002-09-17split white space and single line policy processing into separateJun-ichiro itojun Hagino
functions. from provos
2002-09-17daemon should not change the directory. from provosJun-ichiro itojun Hagino
2002-09-16periodically save policies that have been modified. from provosJun-ichiro itojun Hagino
>here is a diff that will cause systrace to periodically save policies >that have been modified. Useful if you run systrace on an xterm and >kill it accidently. Or other applications like opera that are long >running and can cause weird crashes.
2002-09-06standalone ; at top scope is illegal in ansi cTheo de Raadt
2002-09-06no , at end of enumTheo de Raadt