summaryrefslogtreecommitdiff
path: root/sbin/pflogd/privsep.c
AgeCommit message (Expand)Author
2021-07-12Change the error reporting pattern throughout the tree when unveilBob Beck
2019-11-27use _PATH_ names for unveil if possibleTheo de Raadt
2019-06-28When system calls indicate an error they return -1, not some arbitraryTheo de Raadt
2018-08-26Unveil pflogd(8). Similiar to florian@'s recent changes to ifconfig(8),Bryan Steele
2018-08-26pflogd(8): don't try to rename(2) broken/invalid pflog files, instead,Bryan Steele
2017-09-09Rework pflogd(8)'s fork+exec model; re-exec the unpriv child, not theBryan Steele
2017-09-06pflogd(8) currently spams the console on shutdown if syslogd(8) wins theBryan Steele
2017-09-05fork+exec model for pflogd(8); move pcap init to the re-exec'd privsepBryan Steele
2017-08-12Make not yet implemented pledges more visible in grep output.Florian Obser
2017-07-04Revert back previous, pledge cannot be enabled on the privsep'd proc yet, atRicardo Mestre
2017-06-12pledge(2) bpf has been in use for some time now on tcpdump(8), this will enableRicardo Mestre
2017-01-23Split pledge "ioctl" into "tape" and "bpf", and allow SIOCGIFGROUP onlyTheo de Raadt
2017-01-23pflogd will need pledge(proc), still disabled because of bfdSebastian Benoit
2016-01-16Interface status printing (at exit and USR1) was broken for a while.Can Erkin Acar
2015-10-10pflogd contained the same "privsep error" as tcpdump -- assuming thatTheo de Raadt
2015-04-28Someone went to the trouble of vertically aligning a set of parameters butMike Larkin
2014-06-26Create temporary file with mkstemp and unlink if rename operation fails.Tobias Stoeckmann
2013-09-13errx() provides its own newline, so remove it from the string hereBret Lambert
2009-12-24spelling fixes, from Brad Tilley; we will not fix src/sbin/dump/dump.hIgor Sobrado
2006-10-25Remove some unneeded externs. OK canacar@Moritz Jodeit
2006-03-06convert permanent privilege revocation to use setresuid/setresgid;Damien Miller
2006-01-15If the log file is invalid/incompatible, try to rename the bad log fileCan Erkin Acar
2004-12-22also pass SIGINT/QUIT to child, from mpech@. ok avsm@Otto Moerbeek
2004-07-14no \n in errx(3)Henning Brauer
2004-04-08sigh, really fix the error message this time, thanks Moritz JodeitAnil Madhavapeddy
2004-04-08reorder error message and send_fd in order to display the correctAnil Madhavapeddy
2004-04-03dont close an invalid fd, canacar@ okAnil Madhavapeddy
2004-03-14Check return code of chdir() after chroot(); noted by Joris Vink, slight modOtto Moerbeek
2004-02-13cleanup signal handling; close descriptors.Otto Moerbeek
2004-01-18Create log files if they do not already exist, but do not followCan Erkin Acar
2004-01-15Synchronize with syslogd privsep: When reading a new command fails,Can Erkin Acar
2003-10-22spacingTheo de Raadt
2003-10-22use setgroups too; canacar okTheo de Raadt
2003-10-22caution with killTheo de Raadt
2003-10-22privilege seperated pflogdCan Erkin Acar