| Age | Commit message (Expand) | Author |
|---|
| 2015-10-06 | Add new "tty" request, which allows TIOCGETA, TIOCGPGRP, TIOCGWINSZ, | Theo de Raadt |
| 2015-10-06 | Rework the tame cmsg handler to make it work both ways. While on recv one | Claudio Jeker |
| 2015-10-06 | oops, namei was never allowing through valid CPATH operations | Theo de Raadt |
| 2015-10-06 | Add getrusage() to the TAME_SELF catagory. | Theo de Raadt |
| 2015-10-06 | Enable ioctl() in the "rw" request, to support FIONREAD/FIONBIO easier | Theo de Raadt |
| 2015-10-04 | Move getcwd to a seperate area, with a hand-waving explanation for why | Theo de Raadt |
| 2015-10-04 | Allow sysctl read of vm.vm_psstrings, as setproctitle() uses this to | Theo de Raadt |
| 2015-10-04 | spelling | Theo de Raadt |
| 2015-10-03 | Add ktracing of tame()'s arguments' values | Philip Guenther |
| 2015-10-02 | I see no evidence that lstat() is being done for /etc/resolv.conf, nor | Theo de Raadt |
| 2015-10-02 | kern_tame.c | Theo de Raadt |
| 2015-10-02 | Actually, open of /etc/spwd.db must be handled by returning EPERM, not | Theo de Raadt |
| 2015-10-02 | mention these pathname calls are checked in namei | Theo de Raadt |
| 2015-10-02 | remove some debug printf no longer needed | Theo de Raadt |
| 2015-10-02 | changed my mind; block spwd.db, force drop-through to pwd.db for processes un... | Theo de Raadt |
| 2015-10-01 | Fix tame(2) setsockopt check for TCP level. | Doug Hogan |
| 2015-10-01 | add IPv6 equivalents for the permitted IPv4 setsockopts, noticed by doug@, | Stuart Henderson |
| 2015-09-30 | implement new "prot_exec" tame(2) request: | Sebastien Marie |
| 2015-09-29 | Reluctantly classify statfs and fstatfs as RPATH for now, because they | Theo de Raadt |
| 2015-09-28 | make using tame path "/" work. | Sebastien Marie |
| 2015-09-19 | In the internal conversion of _TM_* to TAME_*, some bits were lost for | Sebastien Marie |
| 2015-09-13 | Rename __sysctl syscall to just sysctl, as the userland wrapper is no longer | Philip Guenther |
| 2015-09-11 | Convert _TM_ flags to TAME_ flags, collapsing the entire mapping | Theo de Raadt |
| 2015-09-11 | Only include <sys/tame.h> in the .c files that need it | Philip Guenther |
| 2015-09-09 | Move to next tame() API. The flags are now passed as a very simple string, | Theo de Raadt |
| 2015-09-01 | the special check logic for /usr/share/nls/../libc.cat became failure | Theo de Raadt |
| 2015-09-01 | Corrects a use-after-free in tame_namei(). | Sebastien Marie |
| 2015-08-31 | Consider getfsstat() a RPATH, even though it has no path in it. We may | Theo de Raadt |
| 2015-08-31 | spaces snuck in | Theo de Raadt |
| 2015-08-26 | use ENAMETOOLONG instead of EINVAL for errno when string overflow occurs. | Sebastien Marie |
| 2015-08-26 | After a report from jsg about a memory leak (or was it a double free?), | Theo de Raadt |
| 2015-08-26 | Add TIOCGETA to the tame list for TAME_IOCTL. | Doug Hogan |
| 2015-08-26 | Convert paths argument of tame(2) to const char **. | Doug Hogan |
| 2015-08-25 | remove duplicate SYS_utimes entry | Jonathan Gray |
| 2015-08-24 | corrects two potential double-free on `cwdpath'. The variable will be free'ed | Sebastien Marie |
| 2015-08-24 | Initialize cwdpath so free() is properly handled. | Doug Hogan |
| 2015-08-23 | fix /tmp handling of unlink(); from Caspar Schutijser | Theo de Raadt |
| 2015-08-23 | Perform maximum one cwd lookup in tame(), also make namei version look the | Theo de Raadt |
| 2015-08-23 | Canonicalize non-rooted paths after cwd prepend. | Theo de Raadt |
| 2015-08-23 | check correct offset for terminator; with semarie | Theo de Raadt |
| 2015-08-23 | recompute len when the path is absolute as canonpath could have shrink it | Sebastien Marie |
| 2015-08-22 | Move to tame(int flags, char *paths[]) API/ABI. | Theo de Raadt |
| 2015-08-21 | Whitelist TIOCGPGRP (for tcgetpgrp()) in TAME_IOCTL. | Doug Hogan |
| 2015-08-20 | reactivate tame() | Theo de Raadt |
| 2015-07-29 | Neuter tame(2) with ENOSYS for upcoming release cycle, in a fairly | Theo de Raadt |
| 2015-07-28 | normalize disclaimer to license.template; noted by reyk | Theo de Raadt |
| 2015-07-27 | Rather than disabling tame to coredump, leave it enabled but flag that | Theo de Raadt |
| 2015-07-27 | enforce tame by disabling all TAME_ flags if tame_fail() is reach, and not only | Sebastien Marie |
| 2015-07-23 | Replace TIOCSWINSZ with TIOCGWINSZ in tame(2). | Doug Hogan |
| 2015-07-22 | Slam signal handlers harder in tame_fail(), found by semarie. | Theo de Raadt |
