summaryrefslogtreecommitdiff
path: root/libexec
AgeCommit message (Expand)Author
2015-11-02Remove duplicate declarationPhilip Guenther
2015-11-02Factor out the logic for mprotecting the memory between two symbols intoPhilip Guenther
2015-11-02Fix typo: s/DT_JUMPREL/DT_JMPREL/Philip Guenther
2015-10-29remove tests for LD_HINTS_VERSION_1; ok kettenisTheo de Raadt
2015-10-25No longer create /var/run/ftpd.pid in daemon mode; OK jung@ jca@Todd C. Miller
2015-10-25unifdef some oldness. (BSD not defined since removal of param.h)Ted Unangst
2015-10-25No need to declare pwd_gensalt; it's unused and gone.Antoine Jacoutot
2015-10-24Don't compile pwd_gensalt, it's not needed since we use crypt_checkpass.Antoine Jacoutot
2015-10-22Add pledge support to login_yubikey. Much feedback and OK millert@Brandon Mercer
2015-10-22use crypt_checkpass("password", NULL) to fake a login instead of bcryptTed Unangst
2015-10-22use crypt_checkpass to check passwordTed Unangst
2015-10-22use crypt_checkpass instead of doing things the hard way with crypt.Ted Unangst
2015-10-19Delete the empty example file "ftpchroot"; no example is needed.Ingo Schwarze
2015-10-17login_token needs pledge "flock" now.Alexander Bluhm
2015-10-16Hoist clearing of FIOASYNC to much earlier, then getty can useTheo de Raadt
2015-10-16Implement real "flock" request and add it to userland programs thatTodd C. Miller
2015-10-15Pledge login_token with "stdio rpath wpath cpath fattr getpw tty".Alexander Bluhm
2015-10-14Check mmap and read return values. While at it, remove unused duplicated file.Tobias Stoeckmann
2015-10-14pledge "stdio rpath" is good enough for these mainline BSD auth loginTheo de Raadt
2015-10-13pledge "stdio rpath wpath cpath fattr"; fattr due to locking code borrowedTheo de Raadt
2015-10-12Call pledge(2) after initial getsockname(2) to avoid "inet" addition.Masao Uebayashi
2015-10-10normalize a few more tame request orderings, to help reviewTheo de Raadt
2015-10-09With nfs spool (fork + seteuid/setuid balony) support gone, it becomesTheo de Raadt
2015-10-09remove NFS spool support; it stands in the way of pledge(2)Theo de Raadt
2015-10-09this cpp operates file using pledge "stdio rpath wpath cpath"Theo de Raadt
2015-10-05Use explicit_bzero() instead of memset() for zeroing out secrets.Todd C. Miller
2015-10-05KNF a switch statement, moving a local variable up a frame as well -Theo de Raadt
2015-10-05Remove unused errstr variable.Todd C. Miller
2015-10-04fix custom popen to return pid to caller instead of tracking in a giantTed Unangst
2015-10-02Talk about 'RADIUS server' in most cases, rather than referring specificallyStuart Henderson
2015-10-01some radiusd updates, from theo buehlerJason McIntyre
2015-09-23Don't be too agressive write-protecting the GOT and PLT. If we have no clueMark Kettenis
2015-09-22Use explicit_bzero() to zero out the password. From Michael McConville.Todd C. Miller
2015-09-19kbind has eliminated the need for and use of the bind lock. Delete it, thePhilip Guenther
2015-09-19Remove PROT_EXEC bit from GOT_PERMS. ld.so doesn't need it anymore, andMark Kettenis
2015-09-19Make bootstrapping code compatible with the Secure-PLT ABI.Mark Kettenis
2015-09-13Rename __sysctl syscall to just sysctl, as the userland wrapper is no longerPhilip Guenther
2015-09-12Use kbind for lazy binding GOT/PLT updates on arm.Philip Guenther
2015-09-11add some missing .Cm macros and drop some redundant .Bk while hereIngo Schwarze
2015-09-10read, tls_read, and tls_write return ssize_tBob Beck
2015-09-10fix after libtls api changesBob Beck
2015-09-09Some explicit iflush instructions after the kbind() call are still neededMiod Vallat
2015-09-06Check strdup return value for NULL.Tobias Stoeckmann
2015-09-01test pointers with NULL not '\0'Jonathan Gray
2015-09-01Use kbind for lazy binding GOT/PLT updates on m88k and sparc.Philip Guenther
2015-08-31Add framework for resolving (pun intended) libc namespace issues, usingPhilip Guenther
2015-08-28Use kbind for lazy binding GOT/PLT updates on sh (i.e. landisk)Philip Guenther
2015-08-28remove excess tab at end of line (how did they afford the extra bytes inTheo de Raadt
2015-08-28Use ELF_LDFLAGS to pass the --version-script argument such that we actuallyMark Kettenis
2015-08-27If we take the address of a function pointer, we might get a pointer toMark Kettenis