| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2016-03-19 | Add STANDARDS and HISTORY blurbs for SOCK_{NONBLOCK,CLOEXEC,DNS} | Philip Guenther | |
| 2016-03-19 | This is thrkill, not __thrsigdivert | Philip Guenther | |
| 2016-03-13 | environ and __progname are not declared in a public header; declare them | Philip Guenther | |
| in libc's hidden/stdlib.h instead of in each .c file that needs one ok deraadt@ gsoares@ mpi@ | |||
| 2016-03-11 | missing article in previous; | Jason McIntyre | |
| 2016-03-11 | pledge: define the meaning of passing NULL to one arguments of pledge(2) as "I | Sebastien Marie | |
| don't want to change the current value" it changes only the `request' argument behaviour when NULL is passed: previously it was traited as "" was passed. with help from jmc@ for man-page OK tb@ on previous version | |||
| 2016-03-10 | un-vax; | Jason McIntyre | |
| i've also changed some "and" to "no", since i think it reads better; | |||
| 2016-03-06 | The range of PIDs has changed, and always included zero. | Philip Guenther | |
| Based on diff from Michal Mazurek (akfaew (at) jasminek.net) | |||
| 2016-03-06 | No more compat emulations, so remove ktrace EMUL records and the baggage | Philip Guenther | |
| for generating and parsing them. ok mpi@ naddy@ millert@ deraadt@ | |||
| 2016-03-06 | Document the PT_GET_THREAD_{FIRST,NEXT} requests | Philip Guenther | |
| From Michal Mazurek (akfaew (at) jasminek.net) | |||
| 2016-02-28 | fruncate() returns EFBIG when length exceeds the max file size. | natano | |
| ok mpi@ | |||
| 2016-02-22 | Document sendsyslog2(2) in man page. | Alexander Bluhm | |
| from Rafael Neves; input jmc@; OK deraadt@ | |||
| 2016-02-11 | Document how to use sndio in pledged programs. | Tim van der Molen | |
| Input and OK jmc@ ratchov@ semarie@ | |||
| 2016-01-18 | adjust some syscalls in proc & id; from Carlin Bingham | Theo de Raadt | |
| 2016-01-09 | Replace "function call" with "function" when referring to a function | mmcc | |
| (well, a syscall, but this is the established practice) in the general sense. ok jmc@ | |||
| 2016-01-09 | drop "abort" promise, and make it the default behaviour. | Sebastien Marie | |
| The current code has already setted it by default since 1.74 any pledge failure tries to make a coredump (default rules for coredump still applies: so setuid binaries don't create them locally). ok deraadt@ | |||
| 2016-01-06 | add a bug that the path whitelist is not available at this time. | Ted Unangst | |
| 2016-01-05 | Use "path" not "file" as the function arg to utimes() and utimensat(). | Todd C. Miller | |
| The DESCRIPTION section already referred to "path" in some places. | |||
| 2015-12-25 | Add missing second argument to FD_SET macro in example code snippet. | tb | |
| Spotted and diff provided by d ! lowe () openmailbox ! org, thanks! ok schwarze@ | |||
| 2015-12-16 | documents pledge(2) "dpath" promise | Sebastien Marie | |
| with inputs from jmc@ ok jmc@ deraadt@ | |||
| 2015-12-16 | in pledged process, setuid/setgid/sticky bits should be ignored. | Sebastien Marie | |
| enforce it for mkfifo(2) and mknod(2) (with "dpath" promise). ok deraadt@ | |||
| 2015-12-03 | Remove the /usr/share/nls/ exception from pledge(2). The libc | Alexander Bluhm | |
| native language support was deleted a month ago at u2k15. OK semarie@ deraadt@ | |||
| 2015-12-01 | use strlcat instead of strlcpy with modified arguments. ok deraadt@ | Can Erkin Acar | |
| 2015-12-01 | Document that "tty" provides read-write access to /dev/tty too. | Todd C. Miller | |
| OK deraadt@ | |||
| 2015-12-01 | Send Aviion to same place as Nova II | Theo de Raadt | |
| discussed with jsg | |||
| 2015-12-01 | Mention ksh along with csh when job control is discussed. ok deraadt@ | mmcc | |
| 2015-11-29 | Add pledge "pf" which allows ioctls on pf(4). This will be used by | Sebastian Benoit | |
| relayd and other programs manipulating the packet filter. ok deraadt@ | |||
| 2015-11-25 | Rather than using syslog(3) (which pulls in snprintf), creating the report | Theo de Raadt | |
| string using simpler strings functions and use sendsyslog2() directly. Also, use the LOG_CONS flag so that single-user reports are more clear. Use a buffer size of 1024 (from bluhm) discussed with guenther and matthew ok millert | |||
| 2015-11-25 | Add a syscall stub for sendsyslog2(2), and use it in syslog_r(3), passing | Theo de Raadt | |
| LOG_CONS to the kernel. As a result, the /dev/console opening code can be removed. ok kettenis millert beck | |||
| 2015-11-24 | fix an error in NAME; ok schwarze | Jason McIntyre | |
| 2015-11-23 | point to mount_mfs(8), not mfs(8); | Jason McIntyre | |
| 2015-11-18 | rob pierce spotted a mistake left by jmc | Theo de Raadt | |
| 2015-11-16 | minor tweaks; | Jason McIntyre | |
| 2015-11-16 | Permit revoke(2) for a pledge "rpath tty" | Theo de Raadt | |
| ok millert semarie tedu guenther | |||
| 2015-11-16 | Only perform revoke(2) on tty cdevs. Others paths return ENOTTY. | Theo de Raadt | |
| ok millert semarie tedu guenther | |||
| 2015-11-10 | update NAME section to include all documented functions, | Jason McIntyre | |
| or otherwise change Dt to reflect the name of an existing function; feedback/ok schwarze | |||
| 2015-11-10 | Split the intra-thread functionality from kill(2) into its own syscall | Philip Guenther | |
| thrkill(2), rolling the kill(2) syscall number with the ABI change to avoid breaking binaries during during the transition. thrkill(2) includes a 'tcb' argument that eliminates the need for locking in pthread_kill() and simplifies pthread_cancel(). Switch __stack_smash_handler() to use thrkill(2) and explicitly unblock SIGABRT. Minor bump to both libc and libpthread: make sure you install a new kernel! ok semarie@ | |||
| 2015-11-10 | libc.so can't be unloaded, so move the hidden atexit() and pthread_atfork() | Philip Guenther | |
| stubs for the executable from crtbegin.o into libc, which lets them be excluded from static links that don't use them. For this, drop the normal crt{begin,end}S.o from libc.so: the .init and .fini sections for libc aren't called at the right times anyway, so it's good that they're unused. libc.so just needs __guard_local and the .note.openbsd.ident section, so add them to stack_protector.c for now (this will be improved) "good time" deraadt@ | |||
| 2015-11-07 | add missing NAME entries; | Jason McIntyre | |
| 2015-11-06 | Remove needless comma. | mmcc | |
| 2015-11-03 | Improve explanations throughout | Theo de Raadt | |
| 2015-11-03 | systrace should work now | Ted Unangst | |
| 2015-11-02 | kill 0 has worked for ages, no idea how the man page could be so innacurate ↵ | Theo de Raadt | |
| so long; ok guenther | |||
| 2015-11-01 | replace "can not" with "cannot"; | Jason McIntyre | |
| 2015-10-29 | update text to be more like posix, in particular wrt length = 0 | Ted Unangst | |
| 2015-10-25 | Move the _atfork_list definition to atexit.c so that the fork syscall stub | Philip Guenther | |
| doesn't get pulled into all static executables ok millert@ jca@ | |||
| 2015-10-24 | Unify all the errno names in | Alexander Bluhm | |
| - include comment - libc errlist - nls C msg - man page OK tedu@ | |||
| 2015-10-24 | remove a paste error and get section numbers right for sysctl(3); | Jason McIntyre | |
| 2015-10-23 | Merge the sigaction() and sigprocmask() overloads/wrappers from libpthread | Philip Guenther | |
| into libc, and move pthread_sigmask() as well (just a trivial wrapper). This provides consistent handling of SIGTHR between single- and multi-threaded programs and is a step in the merge of all the libpthread overloads, providing some ASM and Makefile bits that the other wrappers will need. ok deraadt@ millert@ | |||
| 2015-10-23 | Add 3 new pledge requests. "ps" exposes enough sysctl information for | Theo de Raadt | |
| ps-style programs (there are quite a few in the tree, including tmux). "vminfo" exposes a bit more system operation information, which many observation programs want (such as top). settime allows setting the system time, and will be used to pledge-protect the last ntpd process. | |||
| 2015-10-23 | Remove dnssocket() and dnsconnect(), since we decided to use a SOCK_DNS | Theo de Raadt | |
| flag instead. ok guenther tedu semarie | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |