Age | Commit message (Expand) | Author |
2021-07-12 | Change the error reporting pattern throughout the tree when unveil | Bob Beck |
2019-11-27 | use _PATH_ names for unveil if possible | Theo de Raadt |
2019-06-28 | When system calls indicate an error they return -1, not some arbitrary | Theo de Raadt |
2018-08-26 | Unveil pflogd(8). Similiar to florian@'s recent changes to ifconfig(8), | Bryan Steele |
2018-08-26 | pflogd(8): don't try to rename(2) broken/invalid pflog files, instead, | Bryan Steele |
2017-09-09 | Rework pflogd(8)'s fork+exec model; re-exec the unpriv child, not the | Bryan Steele |
2017-09-06 | pflogd(8) currently spams the console on shutdown if syslogd(8) wins the | Bryan Steele |
2017-09-05 | fork+exec model for pflogd(8); move pcap init to the re-exec'd privsep | Bryan Steele |
2017-08-12 | Make not yet implemented pledges more visible in grep output. | Florian Obser |
2017-07-04 | Revert back previous, pledge cannot be enabled on the privsep'd proc yet, at | Ricardo Mestre |
2017-06-12 | pledge(2) bpf has been in use for some time now on tcpdump(8), this will enable | Ricardo Mestre |
2017-01-23 | Split pledge "ioctl" into "tape" and "bpf", and allow SIOCGIFGROUP only | Theo de Raadt |
2017-01-23 | pflogd will need pledge(proc), still disabled because of bfd | Sebastian Benoit |
2016-01-16 | Interface status printing (at exit and USR1) was broken for a while. | Can Erkin Acar |
2015-10-10 | pflogd contained the same "privsep error" as tcpdump -- assuming that | Theo de Raadt |
2015-04-28 | Someone went to the trouble of vertically aligning a set of parameters but | Mike Larkin |
2014-06-26 | Create temporary file with mkstemp and unlink if rename operation fails. | Tobias Stoeckmann |
2013-09-13 | errx() provides its own newline, so remove it from the string here | Bret Lambert |
2009-12-24 | spelling fixes, from Brad Tilley; we will not fix src/sbin/dump/dump.h | Igor Sobrado |
2006-10-25 | Remove some unneeded externs. OK canacar@ | Moritz Jodeit |
2006-03-06 | convert permanent privilege revocation to use setresuid/setresgid; | Damien Miller |
2006-01-15 | If the log file is invalid/incompatible, try to rename the bad log file | Can Erkin Acar |
2004-12-22 | also pass SIGINT/QUIT to child, from mpech@. ok avsm@ | Otto Moerbeek |
2004-07-14 | no \n in errx(3) | Henning Brauer |
2004-04-08 | sigh, really fix the error message this time, thanks Moritz Jodeit | Anil Madhavapeddy |
2004-04-08 | reorder error message and send_fd in order to display the correct | Anil Madhavapeddy |
2004-04-03 | dont close an invalid fd, canacar@ ok | Anil Madhavapeddy |
2004-03-14 | Check return code of chdir() after chroot(); noted by Joris Vink, slight mod | Otto Moerbeek |
2004-02-13 | cleanup signal handling; close descriptors. | Otto Moerbeek |
2004-01-18 | Create log files if they do not already exist, but do not follow | Can Erkin Acar |
2004-01-15 | Synchronize with syslogd privsep: When reading a new command fails, | Can Erkin Acar |
2003-10-22 | spacing | Theo de Raadt |
2003-10-22 | use setgroups too; canacar ok | Theo de Raadt |
2003-10-22 | caution with kill | Theo de Raadt |
2003-10-22 | privilege seperated pflogd | Can Erkin Acar |