| Age | Commit message (Expand) | Author |
|---|
| 2015-10-28 | mkdir is PLEDGE_CPATH, not PLEDGE_CPATH | PLEDGE_RPATH... | Theo de Raadt |
| 2015-10-28 | cleanup indentation and comments in sysctl whitelist | Theo de Raadt |
| 2015-10-28 | more accurate pledge_fail() error and code for sys_socket | Sebastien Marie |
| 2015-10-28 | merge whitelisted r/w paths and rd paths switch to only one. It becomes | Sebastien Marie |
| 2015-10-28 | remove duplicate setting of p_pledgenote: | Sebastien Marie |
| 2015-10-28 | make sys_chroot() only allowed to be used when pledged, with "rpath id proc". | Sebastien Marie |
| 2015-10-28 | Enable TCP/UDP checksum offloading on packet transmission. | Visa Hankala |
| 2015-10-28 | Add proper padding to packets that the hardware does not recognize as | Visa Hankala |
| 2015-10-28 | refactor pledge_namei() a bit | Sebastien Marie |
| 2015-10-28 | canonpath() error isn't related to p_pledgenote requirement (only possible | Sebastien Marie |
| 2015-10-28 | in pledge_namei(), move PLEDGE_EXEC check sooner: it doesn't depend of path | Sebastien Marie |
| 2015-10-28 | Support backspace in softraid boot passphrase prompt. | Joel Sing |
| 2015-10-28 | Add a missing splx for a return path introduced in rev 1.163 | Jonathan Gray |
| 2015-10-28 | Prevent F_SETOWN, unless a "proc" pledge was made. | Theo de Raadt |
| 2015-10-28 | Remove linkmtu and maxmtu from struct nd_ifinfo. IN6_LINKMTU can now | Florian Obser |
| 2015-10-28 | sync | Theo de Raadt |
| 2015-10-28 | The short-lived dnssocket/dnsconnect calls are being required because we | Theo de Raadt |
| 2015-10-28 | Paranoa: p_pledgenote the NAMEI for ld.so loading | Theo de Raadt |
| 2015-10-28 | The short-lived dnssocket/dnsconnect calls are being required because we | Theo de Raadt |
| 2015-10-28 | There are three situations where pty ioctl's result in a NDINIT. | Theo de Raadt |
| 2015-10-28 | Set pledgenote to PLEDGE_RPATH in chdir & chroot | Theo de Raadt |
| 2015-10-28 | TIOCCONS will probably never be permitted, but it is good style to set | Theo de Raadt |
| 2015-10-28 | Though sys_ktrace is not yet pledge allowed, prepare by setting | Theo de Raadt |
| 2015-10-28 | move p_pledgenote setting next to NDINIT() | Theo de Raadt |
| 2015-10-28 | kern.cptime is length 2 | Theo de Raadt |
| 2015-10-28 | missing splx in error path | Jonathan Gray |
| 2015-10-28 | support kern.cptime also | Theo de Raadt |
| 2015-10-27 | RIP arp_ifinit(). | Martin Pieuchot |
| 2015-10-27 | arp_ifinit() is no longer needed. | Martin Pieuchot |
| 2015-10-27 | arp_ifinit() is no longer needed. | Martin Pieuchot |
| 2015-10-27 | Rewrite in_ouraddr() to not use ``rt_ifa'' since it is not obvious that | Martin Pieuchot |
| 2015-10-27 | Use verbose defines instead of hardcoded values for clarity when | Mike Belopuhov |
| 2015-10-27 | Sync chacha_ivsetup to the version in ssh so that we could | Mike Belopuhov |
| 2015-10-27 | Move code around for clarity, no functional change. | Martin Pieuchot |
| 2015-10-27 | Use rt_ifidx rather than rt_ifp. | Martin Pieuchot |
| 2015-10-26 | Add ppoll() to "stdio" | Theo de Raadt |
| 2015-10-26 | Use axf's hashsize as a block size in the authenticated encryption routine. | Mike Belopuhov |
| 2015-10-26 | Use rt_ifidx rather than rt_ifp. | Martin Pieuchot |
| 2015-10-26 | (char *)0 -> NULL | mmcc |
| 2015-10-26 | Let SLIST_REMOVE invalidate the pointer in more cases. | Alexander Bluhm |
| 2015-10-26 | dns check needs to be done on the kernel address after copyin | Ted Unangst |
| 2015-10-26 | Allow NET_RT_IFLIST in pledge "dns" as well | Theo de Raadt |
| 2015-10-26 | If the system call is entirely unpermitted, code will be 0, and there is | Theo de Raadt |
| 2015-10-26 | add setreuid/setregid to "id" | Theo de Raadt |
| 2015-10-26 | change some pledge_fail() error/code | Sebastien Marie |
| 2015-10-26 | make pledge_check(), used for syscall check with pledge, returns an error and | Sebastien Marie |
| 2015-10-26 | Cast isdigit()'s argument to unsigned char. | mmcc |
| 2015-10-25 | unbreak tree for ramdisks without INET6 | Theo de Raadt |
| 2015-10-25 | Put some comments in how nd6_rs_attach() works. | Florian Obser |
| 2015-10-25 | Fold "malloc" into "stdio" and -- recognizing that no program so far has | Theo de Raadt |
