| Age | Commit message (Expand) | Author |
|---|
| 2015-10-25 | No need to declare pwd_gensalt; it's unused and gone. | Antoine Jacoutot |
| 2015-10-24 | Don't compile pwd_gensalt, it's not needed since we use crypt_checkpass. | Antoine Jacoutot |
| 2015-10-22 | Add pledge support to login_yubikey. Much feedback and OK millert@ | Brandon Mercer |
| 2015-10-22 | use crypt_checkpass("password", NULL) to fake a login instead of bcrypt | Ted Unangst |
| 2015-10-22 | use crypt_checkpass to check password | Ted Unangst |
| 2015-10-22 | use crypt_checkpass instead of doing things the hard way with crypt. | Ted Unangst |
| 2015-10-19 | Delete the empty example file "ftpchroot"; no example is needed. | Ingo Schwarze |
| 2015-10-17 | login_token needs pledge "flock" now. | Alexander Bluhm |
| 2015-10-16 | Hoist clearing of FIOASYNC to much earlier, then getty can use | Theo de Raadt |
| 2015-10-16 | Implement real "flock" request and add it to userland programs that | Todd C. Miller |
| 2015-10-15 | Pledge login_token with "stdio rpath wpath cpath fattr getpw tty". | Alexander Bluhm |
| 2015-10-14 | Check mmap and read return values. While at it, remove unused duplicated file. | Tobias Stoeckmann |
| 2015-10-14 | pledge "stdio rpath" is good enough for these mainline BSD auth login | Theo de Raadt |
| 2015-10-13 | pledge "stdio rpath wpath cpath fattr"; fattr due to locking code borrowed | Theo de Raadt |
| 2015-10-12 | Call pledge(2) after initial getsockname(2) to avoid "inet" addition. | Masao Uebayashi |
| 2015-10-10 | normalize a few more tame request orderings, to help review | Theo de Raadt |
| 2015-10-09 | With nfs spool (fork + seteuid/setuid balony) support gone, it becomes | Theo de Raadt |
| 2015-10-09 | remove NFS spool support; it stands in the way of pledge(2) | Theo de Raadt |
| 2015-10-09 | this cpp operates file using pledge "stdio rpath wpath cpath" | Theo de Raadt |
| 2015-10-05 | Use explicit_bzero() instead of memset() for zeroing out secrets. | Todd C. Miller |
| 2015-10-05 | KNF a switch statement, moving a local variable up a frame as well - | Theo de Raadt |
| 2015-10-05 | Remove unused errstr variable. | Todd C. Miller |
| 2015-10-04 | fix custom popen to return pid to caller instead of tracking in a giant | Ted Unangst |
| 2015-10-02 | Talk about 'RADIUS server' in most cases, rather than referring specifically | Stuart Henderson |
| 2015-10-01 | some radiusd updates, from theo buehler | Jason McIntyre |
| 2015-09-23 | Don't be too agressive write-protecting the GOT and PLT. If we have no clue | Mark Kettenis |
| 2015-09-22 | Use explicit_bzero() to zero out the password. From Michael McConville. | Todd C. Miller |
| 2015-09-19 | kbind has eliminated the need for and use of the bind lock. Delete it, the | Philip Guenther |
| 2015-09-19 | Remove PROT_EXEC bit from GOT_PERMS. ld.so doesn't need it anymore, and | Mark Kettenis |
| 2015-09-19 | Make bootstrapping code compatible with the Secure-PLT ABI. | Mark Kettenis |
| 2015-09-13 | Rename __sysctl syscall to just sysctl, as the userland wrapper is no longer | Philip Guenther |
| 2015-09-12 | Use kbind for lazy binding GOT/PLT updates on arm. | Philip Guenther |
| 2015-09-11 | add some missing .Cm macros and drop some redundant .Bk while here | Ingo Schwarze |
| 2015-09-10 | read, tls_read, and tls_write return ssize_t | Bob Beck |
| 2015-09-10 | fix after libtls api changes | Bob Beck |
| 2015-09-09 | Some explicit iflush instructions after the kbind() call are still needed | Miod Vallat |
| 2015-09-06 | Check strdup return value for NULL. | Tobias Stoeckmann |
| 2015-09-01 | test pointers with NULL not '\0' | Jonathan Gray |
| 2015-09-01 | Use kbind for lazy binding GOT/PLT updates on m88k and sparc. | Philip Guenther |
| 2015-08-31 | Add framework for resolving (pun intended) libc namespace issues, using | Philip Guenther |
| 2015-08-28 | Use kbind for lazy binding GOT/PLT updates on sh (i.e. landisk) | Philip Guenther |
| 2015-08-28 | remove excess tab at end of line (how did they afford the extra bytes in | Theo de Raadt |
| 2015-08-28 | Use ELF_LDFLAGS to pass the --version-script argument such that we actually | Mark Kettenis |
| 2015-08-27 | If we take the address of a function pointer, we might get a pointer to | Mark Kettenis |
| 2015-08-27 | Use kbind for lazy binding GOT/PLT updates on hppa. | Philip Guenther |
| 2015-08-26 | Kbind 3: The Legend Continues! | Philip Guenther |
| 2015-08-25 | Use kbind for lazy binding GOT/PLT updates on i386 and powerpc; still others | Philip Guenther |
| 2015-08-23 | Apply a symbol export list to ld.so with just the expected dl*() and the | Philip Guenther |
| 2015-08-23 | Use kbind for lazy binding GOT/PLT updates on amd64 and sparc64; others | Philip Guenther |
| 2015-08-23 | Add support for the Secure-PLT ABI variant. This will give us better W^X | Mark Kettenis |
