Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-04-10 | Clean up and complete the lists of allowed syscalls. | Theo Buehler | |
With input from schwarze@ and semarie@. "go ahead" schwarze@ (documentation perspective only, without checking factual accuracy) ok semarie@ on an earlier version | |||
2016-04-09 | Document (near) standards conformance | Philip Guenther | |
based on diff by mmcc@ | |||
2016-03-30 | Turd polish: use HIDDEN= instead of PSEUDO= for ptrace syscall stub, to | Philip Guenther | |
make its underlying symbol name look like others. | |||
2016-03-30 | Eliminate userspace caching by getlogin_r/setlogin; make the getlogin | Philip Guenther | |
syscall behave exactly like userspace getlogin_r() and rename it to match. Eliminate the reduced-to-no-op wrappers of the syscalls. Eliminate the unnecessary per-thread static buffering by getlogin(). ok kettenis@ deraadt@ | |||
2016-03-30 | some Xr adjustment to catch up with MLINKS removal; | Jason McIntyre | |
2016-03-30 | for some time now mandoc has not required MLINKS to function | Jason McIntyre | |
correctly - logically complete that now by removing MLINKS from base; authors need only to ensure there is an entry in NAME for any function/ util being added. MLINKS will still work, and remain for perl to ease upgrades; ok nicm (curses) bcook (ssl) ok schwarze, who provided a lot of feedback and assistance ok tb natano jung | |||
2016-03-27 | Add EISDIR to ERRORS and fix ETXTBSY description; from Piotr Durlej. | Todd C. Miller | |
OK jmc@ | |||
2016-03-22 | Improve the sendsyslog(2) man page. | Alexander Bluhm | |
OK deraadt@ guenther@ jmc@ | |||
2016-03-22 | tweak previous; | Jason McIntyre | |
2016-03-21 | Rename the system call sendsyslog2 to sendsyslog. Keep the old one | Alexander Bluhm | |
as osendsyslog for a while. The three argument variant is the only one that will stay. input kettenis@; OK deraadt@ | |||
2016-03-20 | __thrsleep.2 is contained in section 2 | natano | |
ok jmc | |||
2016-03-20 | It's libpthread, not librthread, and __tfork(2) lets you set the TCB | Philip Guenther | |
address of the new thread | |||
2016-03-19 | Add STANDARDS and HISTORY blurbs for SOCK_{NONBLOCK,CLOEXEC,DNS} | Philip Guenther | |
2016-03-19 | This is thrkill, not __thrsigdivert | Philip Guenther | |
2016-03-13 | environ and __progname are not declared in a public header; declare them | Philip Guenther | |
in libc's hidden/stdlib.h instead of in each .c file that needs one ok deraadt@ gsoares@ mpi@ | |||
2016-03-11 | missing article in previous; | Jason McIntyre | |
2016-03-11 | pledge: define the meaning of passing NULL to one arguments of pledge(2) as "I | Sebastien Marie | |
don't want to change the current value" it changes only the `request' argument behaviour when NULL is passed: previously it was traited as "" was passed. with help from jmc@ for man-page OK tb@ on previous version | |||
2016-03-10 | un-vax; | Jason McIntyre | |
i've also changed some "and" to "no", since i think it reads better; | |||
2016-03-06 | The range of PIDs has changed, and always included zero. | Philip Guenther | |
Based on diff from Michal Mazurek (akfaew (at) jasminek.net) | |||
2016-03-06 | No more compat emulations, so remove ktrace EMUL records and the baggage | Philip Guenther | |
for generating and parsing them. ok mpi@ naddy@ millert@ deraadt@ | |||
2016-03-06 | Document the PT_GET_THREAD_{FIRST,NEXT} requests | Philip Guenther | |
From Michal Mazurek (akfaew (at) jasminek.net) | |||
2016-02-28 | fruncate() returns EFBIG when length exceeds the max file size. | natano | |
ok mpi@ | |||
2016-02-22 | Document sendsyslog2(2) in man page. | Alexander Bluhm | |
from Rafael Neves; input jmc@; OK deraadt@ | |||
2016-02-11 | Document how to use sndio in pledged programs. | Tim van der Molen | |
Input and OK jmc@ ratchov@ semarie@ | |||
2016-01-18 | adjust some syscalls in proc & id; from Carlin Bingham | Theo de Raadt | |
2016-01-09 | Replace "function call" with "function" when referring to a function | mmcc | |
(well, a syscall, but this is the established practice) in the general sense. ok jmc@ | |||
2016-01-09 | drop "abort" promise, and make it the default behaviour. | Sebastien Marie | |
The current code has already setted it by default since 1.74 any pledge failure tries to make a coredump (default rules for coredump still applies: so setuid binaries don't create them locally). ok deraadt@ | |||
2016-01-06 | add a bug that the path whitelist is not available at this time. | Ted Unangst | |
2016-01-05 | Use "path" not "file" as the function arg to utimes() and utimensat(). | Todd C. Miller | |
The DESCRIPTION section already referred to "path" in some places. | |||
2015-12-25 | Add missing second argument to FD_SET macro in example code snippet. | tb | |
Spotted and diff provided by d ! lowe () openmailbox ! org, thanks! ok schwarze@ | |||
2015-12-16 | documents pledge(2) "dpath" promise | Sebastien Marie | |
with inputs from jmc@ ok jmc@ deraadt@ | |||
2015-12-16 | in pledged process, setuid/setgid/sticky bits should be ignored. | Sebastien Marie | |
enforce it for mkfifo(2) and mknod(2) (with "dpath" promise). ok deraadt@ | |||
2015-12-03 | Remove the /usr/share/nls/ exception from pledge(2). The libc | Alexander Bluhm | |
native language support was deleted a month ago at u2k15. OK semarie@ deraadt@ | |||
2015-12-01 | use strlcat instead of strlcpy with modified arguments. ok deraadt@ | Can Erkin Acar | |
2015-12-01 | Document that "tty" provides read-write access to /dev/tty too. | Todd C. Miller | |
OK deraadt@ | |||
2015-12-01 | Send Aviion to same place as Nova II | Theo de Raadt | |
discussed with jsg | |||
2015-12-01 | Mention ksh along with csh when job control is discussed. ok deraadt@ | mmcc | |
2015-11-29 | Add pledge "pf" which allows ioctls on pf(4). This will be used by | Sebastian Benoit | |
relayd and other programs manipulating the packet filter. ok deraadt@ | |||
2015-11-25 | Rather than using syslog(3) (which pulls in snprintf), creating the report | Theo de Raadt | |
string using simpler strings functions and use sendsyslog2() directly. Also, use the LOG_CONS flag so that single-user reports are more clear. Use a buffer size of 1024 (from bluhm) discussed with guenther and matthew ok millert | |||
2015-11-25 | Add a syscall stub for sendsyslog2(2), and use it in syslog_r(3), passing | Theo de Raadt | |
LOG_CONS to the kernel. As a result, the /dev/console opening code can be removed. ok kettenis millert beck | |||
2015-11-24 | fix an error in NAME; ok schwarze | Jason McIntyre | |
2015-11-23 | point to mount_mfs(8), not mfs(8); | Jason McIntyre | |
2015-11-18 | rob pierce spotted a mistake left by jmc | Theo de Raadt | |
2015-11-16 | minor tweaks; | Jason McIntyre | |
2015-11-16 | Permit revoke(2) for a pledge "rpath tty" | Theo de Raadt | |
ok millert semarie tedu guenther | |||
2015-11-16 | Only perform revoke(2) on tty cdevs. Others paths return ENOTTY. | Theo de Raadt | |
ok millert semarie tedu guenther | |||
2015-11-10 | update NAME section to include all documented functions, | Jason McIntyre | |
or otherwise change Dt to reflect the name of an existing function; feedback/ok schwarze | |||
2015-11-10 | Split the intra-thread functionality from kill(2) into its own syscall | Philip Guenther | |
thrkill(2), rolling the kill(2) syscall number with the ABI change to avoid breaking binaries during during the transition. thrkill(2) includes a 'tcb' argument that eliminates the need for locking in pthread_kill() and simplifies pthread_cancel(). Switch __stack_smash_handler() to use thrkill(2) and explicitly unblock SIGABRT. Minor bump to both libc and libpthread: make sure you install a new kernel! ok semarie@ | |||
2015-11-10 | libc.so can't be unloaded, so move the hidden atexit() and pthread_atfork() | Philip Guenther | |
stubs for the executable from crtbegin.o into libc, which lets them be excluded from static links that don't use them. For this, drop the normal crt{begin,end}S.o from libc.so: the .init and .fini sections for libc aren't called at the right times anyway, so it's good that they're unused. libc.so just needs __guard_local and the .note.openbsd.ident section, so add them to stack_protector.c for now (this will be improved) "good time" deraadt@ | |||
2015-11-07 | add missing NAME entries; | Jason McIntyre | |