Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-03-17 | Last parameter to execl[e]() functions *must* be cast to a pointer. | Kenneth R Westerback | |
Just NULL is not good practise as NULL is theoretically allowed to be an integer rather than a pointer. Use (char *)NULL consistently instead of scattering a few (char *)0 and (void *)NULL into the mix. Prompted by and probably ok deraadt@ millert@ kettenis@ Definitely ok mestre@ ratchov@ | |||
2016-01-09 | drop "abort" promise, and make it the default behaviour. | Sebastien Marie | |
The current code has already setted it by default since 1.74 any pledge failure tries to make a coredump (default rules for coredump still applies: so setuid binaries don't create them locally). ok deraadt@ | |||
2015-12-05 | simplistic regress test for KEVENT_TIMER kqueue(2) calls | Bret Lambert | |
ok and prodding tedu@ | |||
2015-11-14 | regress: pledge: update SYS_kill syscall number | Sebastien Marie | |
2015-11-03 | regress: pledge | Sebastien Marie | |
check for error output for systrace | |||
2015-11-03 | regress: pledge | Sebastien Marie | |
- add $OpenBSD$ tag in systrace.filter.in - replace dir by variable | |||
2015-11-03 | regress pledge: check the regress with systrace enabled too | Sebastien Marie | |
2015-10-30 | regress: pledge | Sebastien Marie | |
- for calling ioctl(2), we need "stdio" now: change test_request_tty - for calling kill(2), we need "stdio" now: change test_kill | |||
2015-10-29 | regress pledge: rpath isn't needed anymore for mkdir() | Sebastien Marie | |
make the cpath test more strict. | |||
2015-10-26 | update regress suite for pledge | Sebastien Marie | |
2015-10-26 | temporary unhook regress/sys/kern/pledge from regress | Sebastien Marie | |
2015-10-23 | Cast isdigit() argument to unsigned char. | mmcc | |
2015-10-20 | update regress for pledge after whitelisted-path view inclusion | Sebastien Marie | |
2015-10-18 | regress pledge: test kill() | Sebastien Marie | |
since "inet" has PLEDGE_SELF, and now calling kill() to self is permitted with PLEDGE_SELF, try this with "fattr" | |||
2015-10-18 | regress pledge: remove cmsg | Sebastien Marie | |
it has no sens to keep it. | |||
2015-10-18 | regress pledge: cpath test | Sebastien Marie | |
you need to read the directory before creating something in. add rpath | |||
2015-10-18 | regress pledge: cmsg is deprecated | Sebastien Marie | |
2015-10-18 | regress pledge: tweak a bit the manner to grab hte syscall number | Sebastien Marie | |
permit debug string be present on the line | |||
2015-10-09 | regress pledge | Sebastien Marie | |
add missing $OpenBSD$ header | |||
2015-10-09 | regress pledge: remove 'regenerate' target | Sebastien Marie | |
2015-10-09 | add "tty" regress for pledge | Sebastien Marie | |
2015-10-09 | hook pledge | Sebastien Marie | |
2015-10-09 | follow tame->pledge in regress | Sebastien Marie | |
2015-10-08 | allow a test to manage itself the tame(2) call. | Sebastien Marie | |
2015-10-06 | update "cmsg" tests: it lost TAME_SELF flag. | Sebastien Marie | |
2015-10-06 | add some tests for rpath, wpath, cpath | Sebastien Marie | |
2015-09-30 | implement new "prot_exec" tame(2) request: | Sebastien Marie | |
- by default, a tamed-program don't have the possibility to use PROT_EXEC for mmap(2) or mprotect(2) - for that, use the request "prot_exec" (that could be dropped later) initial idea from deraadt@ and kettenis@ "make complete sense" beck@ ok deraadt@ | |||
2015-09-28 | make using tame path "/" work. | Sebastien Marie | |
and add a regress test for that. ok deraadt@ | |||
2015-09-27 | add a tame(2) regress for stat(2) and realpath(3) | Sebastien Marie | |
2015-09-24 | tame("xxx", NULL) and tame("xxx", {NULL}) are not the same | Sebastien Marie | |
- change output of regress to reflect that - add test | |||
2015-09-24 | refactor a bit regress tame | Sebastien Marie | |
- unit tests are functions in main.c - use test name in output - add grabbing stdout output of tests | |||
2015-09-18 | remove check for LD_BIND_NOW as kbind(2) is available on almost (all ?) arch | Sebastien Marie | |
where LD_BIND_NOW was in use. | |||
2015-09-10 | enable generic regress for tame(2) | Sebastien Marie | |
2015-09-10 | convert tame(2) regress to new API | Sebastien Marie | |
2015-09-10 | convert tame(2) regress to new API | Sebastien Marie | |
2015-08-28 | Add obviously missing #includes | Philip Guenther | |
2015-08-24 | add a missing header | Sebastien Marie | |
2015-08-24 | add new (extensible) testsuite for tame(2) | Sebastien Marie | |
2015-08-23 | remove tame/sys_exit in favor of more generic approch (soon) | Sebastien Marie | |
2015-08-23 | convert to new tame(2) ABI/API | Sebastien Marie | |
2015-08-13 | NOTE_FORK|NOTE_TRACK knote can track grandchild processes. Wait for | Masao Uebayashi | |
both child/grandchild process events. | |||
2015-08-13 | Zero-clear test buffers. Close fds. | Masao Uebayashi | |
2015-08-13 | Close an fd. | Masao Uebayashi | |
2015-08-13 | Zero-clear test buffer. Close fds. | Masao Uebayashi | |
2015-08-13 | Zero-clear test buffer. | Masao Uebayashi | |
2015-08-13 | Zero-clear test buffer. KNF while here. | Masao Uebayashi | |
2015-08-02 | Kill a useless assignment. | Masao Uebayashi | |
2015-08-02 | Refactor to prepare a future change; no functional changes. | Masao Uebayashi | |
2015-08-01 | SPC -> TAB | Masao Uebayashi | |
2015-07-28 | check that flags value of 0 restricts the process to the _exit(2) system call. | Sebastien Marie | |
note that it isn't the case currently. |