Age | Commit message (Expand) | Author |
2015-08-23 | recompute len when the path is absolute as canonpath could have shrink it | Sebastien Marie |
2015-08-22 | Move to tame(int flags, char *paths[]) API/ABI. | Theo de Raadt |
2015-08-21 | Whitelist TIOCGPGRP (for tcgetpgrp()) in TAME_IOCTL. | Doug Hogan |
2015-08-21 | re-enable *8. | David Gwynne |
2015-08-20 | reactivate tame() | Theo de Raadt |
2015-08-14 | provide ml_requeue and mq_requeue for prepending mbufs on lists/queues | David Gwynne |
2015-08-12 | Remove last two 'uses' of d_subtype in tree. No point in setting | Kenneth R Westerback |
2015-08-03 | Unfortunately netstat did not show sockets without file descriptors | Alexander Bluhm |
2015-08-01 | Fix free() of uninitialized variable introduced in previous commit. | Philip Guenther |
2015-07-29 | Neuter tame(2) with ENOSYS for upcoming release cycle, in a fairly | Theo de Raadt |
2015-07-29 | Zap a couple of extra blank lines that keep showing up in diffs I'm | Kenneth R Westerback |
2015-07-28 | Convert sectors to DEV_BSIZE block values were necessary to find, | Kenneth R Westerback |
2015-07-28 | normalize disclaimer to license.template; noted by reyk | Theo de Raadt |
2015-07-28 | For unix domain sequenced packet socket pairs the ruby regression | Alexander Bluhm |
2015-07-28 | Add ktracing of structs iovec, msghdr, and cmsghdr for {,p}{read,write}v(), | Philip Guenther |
2015-07-27 | Rather than disabling tame to coredump, leave it enabled but flag that | Theo de Raadt |
2015-07-27 | enforce tame by disabling all TAME_ flags if tame_fail() is reach, and not only | Sebastien Marie |
2015-07-27 | tame check of msghdr should be done after checking for copyin failure | Philip Guenther |
2015-07-26 | Always initialize the b_error field and B_ERROR flag before using | Kenneth R Westerback |
2015-07-23 | Revert attempted GPT code cleanup. Too much code, too little testing. | Kenneth R Westerback |
2015-07-23 | remove the POOL_NEEDS_CATCHUP macro, it isnt used. | David Gwynne |
2015-07-23 | Replace TIOCSWINSZ with TIOCGWINSZ in tame(2). | Doug Hogan |
2015-07-22 | Slam signal handlers harder in tame_fail(), found by semarie. | Theo de Raadt |
2015-07-22 | memory leak in execve with systrace, plus some unreachable code | Theo de Raadt |
2015-07-21 | Always permit kbind (for dynamic linking) and add __thrsigdivert to the | Philip Guenther |
2015-07-21 | hookup octeon | Jasper Lievisse Adriaanse |
2015-07-20 | Move `ticks' declaration to sys/kernel.h. | Masao Uebayashi |
2015-07-20 | Fix tty hiwat handling a bit | Stefan Fritsch |
2015-07-20 | crudely canonicalize paths before taming them. ok deraadt doug | Ted Unangst |
2015-07-20 | Move the construction of p_tamenote from sys_open() to doopenat(), so that | Theo de Raadt |
2015-07-20 | Allow the sched_yield, __thrsleep, __thrwakeup, and __threxit syscalls | Jeremy Evans |
2015-07-20 | In _TM_SELF, permit uname(3); OK deraadt@. | Ingo Schwarze |
2015-07-20 | Be more paranoid and don't let any ioctls through with invalid file | Nicholas Marriott |
2015-07-20 | Don't try to dereference fp if it is NULL, ok deraadt | Nicholas Marriott |
2015-07-20 | tame_cmsg_send and tame_cmsg_recv are called with the data set to a file | Nicholas Marriott |
2015-07-20 | getpagesize() may occur late in programs; permit it | Theo de Raadt |
2015-07-20 | Add setgroups(2) to TAME_PROC, ok deraadt | Nicholas Marriott |
2015-07-20 | In TAME_IOCTL, permit BIOCGSTATS on a vnode. We don't drill down deeper | Theo de Raadt |
2015-07-20 | rebuild | Philip Guenther |
2015-07-20 | Add kbind, a syscall for ld.so to use to securely and efficiently update | Philip Guenther |
2015-07-20 | Fix annoying console spew when we can't write the core file. use log instead. | Bob Beck |
2015-07-19 | Repair various strncmp lengths, noticed by Brandon Casey | Theo de Raadt |
2015-07-19 | Change uvm_page[re]alloc_multi to actually use the flags passed in, and return | Bob Beck |
2015-07-19 | Use two 2q caches for the buffer cache, moving previously warm buffers from the | Bob Beck |
2015-07-19 | Make KTR_SYSRET records variables variables sized, leaving out the | Philip Guenther |
2015-07-19 | sync | Theo de Raadt |
2015-07-19 | tame(2) is a subsystem which restricts programs into a "reduced feature | Theo de Raadt |
2015-07-18 | Change unp_scan() and its callbacks to pass the array of struct file ** | Philip Guenther |
2015-07-18 | Kill emul left-over. | Martin Pieuchot |
2015-07-17 | manage spd entries by using the radix api directly instead of | Bret Lambert |