| Age | Commit message (Expand) | Author |
|---|
| 2018-06-20 | Grab and/or assert for the KERNEL_LOCK() in in ktrace & pledge. | Martin Pieuchot |
| 2018-06-16 | Introduce "wroute" promise. | Florian Obser |
| 2018-06-03 | on i386, libm does sysctl to discover is the system has SSE. Whitelist | Theo de Raadt |
| 2018-04-28 | Remove redundant error check | kn |
| 2018-03-27 | Make sure that programs violating a pledge(2) promise or some memory | Martin Pieuchot |
| 2018-01-09 | Change `so_state' and `so_error' to unsigned int such that they can | Martin Pieuchot |
| 2018-01-08 | Allow TIOCUCNTL issued on a pty(4) master in promise "tty". | Martin Pieuchot |
| 2017-12-12 | pledge()'s 2nd argument becomes char *execpromises, which becomes the | Theo de Raadt |
| 2017-12-09 | More precision in pledge sysctl report | Theo de Raadt |
| 2017-11-17 | permit IPV6_V6ONLY in sockopt | Aaron Bieber |
| 2017-10-12 | Print the word pledge in the kernel log when there is a violation. | Alexander Bluhm |
| 2017-10-07 | In "tty", permitting TIOCSTART is fine | Theo de Raadt |
| 2017-10-07 | permit SYS___set_tcb, upcoming code will require this | Theo de Raadt |
| 2017-09-08 | If you use sys/param.h, you don't need sys/types.h | Theo de Raadt |
| 2017-08-29 | Remove old deactivated pledge path code. A replacement mechanism is | Theo de Raadt |
| 2017-08-21 | Allow SIOCGIFAFLAG_IN6 and SIOCGIFALIFETIME_IN6 ioctls with | Florian Obser |
| 2017-07-28 | Allow SIOCGIFDESCR with "route" promise in preparation for pledging snmpd. | rob |
| 2017-06-29 | Due to risks known for decades, TIOCSTI now performs no action, and simply | Theo de Raadt |
| 2017-06-21 | Permit TIOCSTAT on a tty. | Theo de Raadt |
| 2017-06-19 | Terminate pledge log(9) with newline. This fixes dmesg(8) output. | Alexander Bluhm |
| 2017-06-12 | Pledge is fairly done, so the kernel printf's can be converted to log() | Theo de Raadt |
| 2017-06-07 | Add an acct(5) flag for pledge violations. Then lastcomm(1) shows | Alexander Bluhm |
| 2017-06-03 | Avoid printing garbage when aborting a program that tries to use a | Theo Buehler |
| 2017-05-30 | getrtable() is now permitted in "stdio". It carries no risk factors. | Theo de Raadt |
| 2017-05-21 | Enable radeondrm(4) on loongson to get accelerated graphics | Visa Hankala |
| 2017-05-02 | Stricter pledge for bpf. ok deraadt | Martin Natano |
| 2017-04-29 | Mark futex(2) as PLEDGE_STDIO like all other thread-related syscalls. | Martin Pieuchot |
| 2017-04-28 | Add futex(2) syscall based on a sane subset of its Linux equivalent. | Martin Pieuchot |
| 2017-04-20 | only 32 bits of the pledgecode were passed up via ktrace | Theo de Raadt |
| 2017-04-17 | matthieu@ observes % pax (without any arguments) hits pledge violation, | Theo de Raadt |
| 2017-04-13 | Delete the getlogin59 syscall, which was last used one year, two releases, | Philip Guenther |
| 2017-04-11 | Add SIOCATMARK to allow pledge("inet") programs to call sockatmark(3). | Alexander Bluhm |
| 2017-03-30 | correct NBPFILTER #ifdef's | Theo de Raadt |
| 2017-03-28 | Allow the multicast ttl/hops and loop options with the mcast pledge. | Alexander Bluhm |
| 2017-03-27 | wrap bpf pledge code in #if BPFFILTER | Theo de Raadt |
| 2017-03-26 | Inside pledge_ioctl, wrap #if's around the complete sub-blocks. | Theo de Raadt |
| 2017-03-26 | For the tape ioctls, recognize that block devices don't exist anymore. | Theo de Raadt |
| 2017-03-18 | The "ioctl" pledge which was had functionality split out into "tape", | Theo de Raadt |
| 2017-03-14 | Allow SIOCGIFXFLAGS in pledge("route") along side SIOCGIFFLAGS, needed | Florian Obser |
| 2017-03-11 | pax conversion was missed; give this another week | Theo de Raadt |
| 2017-03-11 | remove pledge "ioctl" backwards compat | Theo de Raadt |
| 2017-01-23 | Backwards compat for pledge "ioctl" for about a week | Theo de Raadt |
| 2017-01-23 | Split pledge "ioctl" into "tape" and "bpf", and allow SIOCGIFGROUP only | Theo de Raadt |
| 2017-01-23 | whitespace | Theo de Raadt |
| 2017-01-21 | p_comm is the process's command and isn't per thread, so move it from | Philip Guenther |
| 2016-11-13 | Fix typo in comment: it's vm.loadavg, not kern.loadavg. | Theo Buehler |
| 2016-10-27 | For consistency, allow symlinkat(2) in the same way as symlink(2); | Ingo Schwarze |
| 2016-10-21 | pledge changes needed to support pledging vmd(8) on i386, forthcoming. | Mike Larkin |
| 2016-10-06 | In pledge_namei_wlpath() if resolvpath() errors out early it will not | Jonathan Gray |
| 2016-10-05 | Display the process's PID with p->p_p->ps_pid, not p->p_pid. | Philip Guenther |
