Age | Commit message (Expand) | Author |
2023-10-30 | seperate -> separate; | Jason McIntyre |
2023-10-30 | make special note, right at the start, that DNS is handled seperately | Theo de Raadt |
2023-08-20 | Add syscall stub for kqueue1(2) | Visa Hankala |
2023-06-02 | pledge(2): stdio: permit restricted profil(2) for moncontrol(3) | Scott Soule Cheloha |
2023-05-19 | Since waitid(2) shares code with wait4(2) and doesn't expose any | Philip Guenther |
2022-07-17 | Delete mention of the old /var/run/ypbind.lock hack. | Theo de Raadt |
2022-02-25 | add setrtable to pledge("id"). from Matthew Martin | Ted Unangst |
2021-07-18 | Markup promises with Cm not Va | kn |
2021-06-30 | use .Fa rather than .Ar; patch from me at EmilEngler dot com | Ingo Schwarze |
2020-07-17 | "wroute" allows changes to the routing table; ok deraadt | Jason McIntyre |
2020-07-17 | route and wroute were undocumented; ok florian | Theo de Raadt |
2020-02-05 | Mention AUDIO_MIXER_{DEVINFO,READ,WRITE} in the "audio" section | Alexandre Ratchov |
2019-07-29 | correct mispellings of EACCES; from Kris Katterjohn | Theo de Raadt |
2019-07-25 | Basic macro cleanup, mostly .Nm -> .Fn because .Nm is not a thing | Ingo Schwarze |
2019-01-21 | Document 'video' promise. | Landry Breuil |
2018-11-08 | zap last remains of malloc.conf; prompted by and ok jmc@ | Otto Moerbeek |
2018-07-13 | Unveiling unveil(2). | Bob Beck |
2018-03-16 | anton points out that my previous commit completely messed with the | Jason McIntyre |
2018-03-04 | various tweaks, in part to try and clean up the amount of vertical | Jason McIntyre |
2018-01-12 | Adjust references for sysctl(3) to sysctl(2) | Theo de Raadt |
2018-01-08 | TIOCUCNTL is now allowed by promise "tty". | Martin Pieuchot |
2017-12-12 | space required between macro arg and punctuation; | Jason McIntyre |
2017-12-12 | pledge()'s 2nd argument becomes char *execpromises, which becomes the | Theo de Raadt |
2017-10-22 | Removed duplicated line. | Tobias Stoeckmann |
2017-07-05 | fix cross references to self; found with mandoc -Tlint | Ingo Schwarze |
2017-06-11 | request -> promises; from scott cheloha | Jason McIntyre |
2017-06-07 | Add an acct(5) flag for pledge violations. Then lastcomm(1) shows | Alexander Bluhm |
2017-05-30 | getrlimit is now allowed by "stdio" | Theo de Raadt |
2017-03-28 | Document the mcast pledge(2) as an addition to inet. | Alexander Bluhm |
2017-01-29 | return the sio_open notes to the audio section; from michael reed | Jason McIntyre |
2017-01-23 | whitespace between macro args and punctuation, and zap a ton | Jason McIntyre |
2017-01-23 | Split pledge "ioctl" into "tape" and "bpf", and allow SIOCGIFGROUP only | Theo de Raadt |
2016-10-27 | For consistency, allow symlinkat(2) in the same way as symlink(2); | Ingo Schwarze |
2016-09-13 | spelling; from Frank Schoep | Theo de Raadt |
2016-09-05 | correct wording; from rob@2keys.ca | Theo de Raadt |
2016-09-01 | Update list of ioctls for the audio promise. Suggested by jmc@, thanks. | Alexandre Ratchov |
2016-07-03 | introduces new promise "chown" to allow changing owner/group with *chown(2) f... | Sebastien Marie |
2016-04-13 | Revert the recent changes to pledge.2. | Theo Buehler |
2016-04-12 | tweak previous; | Jason McIntyre |
2016-04-12 | documents "mcast" promise | Sebastien Marie |
2016-04-12 | documents "route" promise | Sebastien Marie |
2016-04-10 | Clean up and complete the lists of allowed syscalls. | Theo Buehler |
2016-03-11 | missing article in previous; | Jason McIntyre |
2016-03-11 | pledge: define the meaning of passing NULL to one arguments of pledge(2) as "I | Sebastien Marie |
2016-02-11 | Document how to use sndio in pledged programs. | Tim van der Molen |
2016-01-18 | adjust some syscalls in proc & id; from Carlin Bingham | Theo de Raadt |
2016-01-09 | drop "abort" promise, and make it the default behaviour. | Sebastien Marie |
2016-01-06 | add a bug that the path whitelist is not available at this time. | Ted Unangst |
2015-12-16 | documents pledge(2) "dpath" promise | Sebastien Marie |
2015-12-16 | in pledged process, setuid/setgid/sticky bits should be ignored. | Sebastien Marie |