summaryrefslogtreecommitdiff
path: root/lib/libc/sys/pledge.2
AgeCommit message (Expand)Author
2023-10-30seperate -> separate;Jason McIntyre
2023-10-30make special note, right at the start, that DNS is handled seperatelyTheo de Raadt
2023-08-20Add syscall stub for kqueue1(2)Visa Hankala
2023-06-02pledge(2): stdio: permit restricted profil(2) for moncontrol(3)Scott Soule Cheloha
2023-05-19Since waitid(2) shares code with wait4(2) and doesn't expose anyPhilip Guenther
2022-07-17Delete mention of the old /var/run/ypbind.lock hack.Theo de Raadt
2022-02-25add setrtable to pledge("id"). from Matthew MartinTed Unangst
2021-07-18Markup promises with Cm not Vakn
2021-06-30use .Fa rather than .Ar; patch from me at EmilEngler dot comIngo Schwarze
2020-07-17"wroute" allows changes to the routing table; ok deraadtJason McIntyre
2020-07-17route and wroute were undocumented; ok florianTheo de Raadt
2020-02-05Mention AUDIO_MIXER_{DEVINFO,READ,WRITE} in the "audio" sectionAlexandre Ratchov
2019-07-29correct mispellings of EACCES; from Kris KatterjohnTheo de Raadt
2019-07-25Basic macro cleanup, mostly .Nm -> .Fn because .Nm is not a thingIngo Schwarze
2019-01-21Document 'video' promise.Landry Breuil
2018-11-08zap last remains of malloc.conf; prompted by and ok jmc@Otto Moerbeek
2018-07-13Unveiling unveil(2).Bob Beck
2018-03-16anton points out that my previous commit completely messed with theJason McIntyre
2018-03-04various tweaks, in part to try and clean up the amount of verticalJason McIntyre
2018-01-12Adjust references for sysctl(3) to sysctl(2)Theo de Raadt
2018-01-08TIOCUCNTL is now allowed by promise "tty".Martin Pieuchot
2017-12-12space required between macro arg and punctuation;Jason McIntyre
2017-12-12pledge()'s 2nd argument becomes char *execpromises, which becomes theTheo de Raadt
2017-10-22Removed duplicated line.Tobias Stoeckmann
2017-07-05fix cross references to self; found with mandoc -TlintIngo Schwarze
2017-06-11request -> promises; from scott chelohaJason McIntyre
2017-06-07Add an acct(5) flag for pledge violations. Then lastcomm(1) showsAlexander Bluhm
2017-05-30getrlimit is now allowed by "stdio"Theo de Raadt
2017-03-28Document the mcast pledge(2) as an addition to inet.Alexander Bluhm
2017-01-29return the sio_open notes to the audio section; from michael reedJason McIntyre
2017-01-23whitespace between macro args and punctuation, and zap a tonJason McIntyre
2017-01-23Split pledge "ioctl" into "tape" and "bpf", and allow SIOCGIFGROUP onlyTheo de Raadt
2016-10-27For consistency, allow symlinkat(2) in the same way as symlink(2);Ingo Schwarze
2016-09-13spelling; from Frank SchoepTheo de Raadt
2016-09-05correct wording; from rob@2keys.caTheo de Raadt
2016-09-01Update list of ioctls for the audio promise. Suggested by jmc@, thanks.Alexandre Ratchov
2016-07-03introduces new promise "chown" to allow changing owner/group with *chown(2) f...Sebastien Marie
2016-04-13Revert the recent changes to pledge.2.Theo Buehler
2016-04-12tweak previous;Jason McIntyre
2016-04-12documents "mcast" promiseSebastien Marie
2016-04-12documents "route" promiseSebastien Marie
2016-04-10Clean up and complete the lists of allowed syscalls.Theo Buehler
2016-03-11missing article in previous;Jason McIntyre
2016-03-11pledge: define the meaning of passing NULL to one arguments of pledge(2) as "ISebastien Marie
2016-02-11Document how to use sndio in pledged programs.Tim van der Molen
2016-01-18adjust some syscalls in proc & id; from Carlin BinghamTheo de Raadt
2016-01-09drop "abort" promise, and make it the default behaviour.Sebastien Marie
2016-01-06add a bug that the path whitelist is not available at this time.Ted Unangst
2015-12-16documents pledge(2) "dpath" promiseSebastien Marie
2015-12-16in pledged process, setuid/setgid/sticky bits should be ignored.Sebastien Marie