Age | Commit message (Collapse) | Author |
|
|
|
gilles@
|
|
that was spotted by deraadt@;
OK deraadt@ jmc@
|
|
|
|
about shared resources which no program should see. only a few pieces of
software use it, generally poorly thought out. they are being fixed, so
mincore() can be deleted.
ok guenther tedu jca sthen, others
|
|
ok kn
|
|
extra check for a truncated cmsghdr needs to be done since the embeded
lenght may be longer than the supplied buffer (MSG_CTRUNC case).
OK deraadt@
|
|
handler; ok guenther@
|
|
|
|
ok otto@
|
|
|
|
ktrace.out unless argument -f is used. We can just unveil(2) that file with read
permissions before the pledge(2) call.
OK deraadt@
|
|
This brings unveil into the tree, disabled by default - Currently
this will return EPERM on all attempts to use it until we are
fully certain it is ready for people to start using, but this
now allows for others to do more tweaking and experimentation.
Still needs to send the unveil's across forks and execs before
fully enabling.
Many thanks to robert@ and deraadt@ for extensive testing.
ok deraadt@
|
|
|
|
|
|
pledge for a new execve image immediately upon start. Also introduces
"error" which makes violations return -1 ENOSYS instead of killing the
program ("error" may not be handed to a setuid/setgid program, which
may be missing/ignoring syscall return values and would continue with
inconsistant state)
Discussion with many
florian has used this to improve the strictness of a daemon
|
|
here, make it easier to extend the set of such fcntl() commands
ok deraadt@
|
|
Noted by Andreas Kusalananda Kähäri (andreas.kahari(at)icm.uu.se)
|
|
ok millert@
|
|
ok otto@ millert@
|
|
Spotted and diff provided by Andrey Bolkonskiy <andrey0bolkonsky@gmail.com>,
thanks!
okay deraadt@
|
|
|
|
|
|
ok deraadt@
|
|
ok deraadt@
|
|
Michal Mazurek <akfaew@jasminek.net>
While here, fix handling of -t+ in ltrace.
|
|
ok guenther
|
|
this is usually a result of a timestamp which hasn't been identified as
"relative" and decoding them to precise dates long in the past is a
distraction. (eagerly awaiting a cleaner, better diff to do the same.)
|
|
|
|
kdump can't do that for a sigaction sa_handler pointer from the trace,
so cast to void* to suppress it.
ok deraadt@
|
|
|
|
parse args of SYS_getlogin_r
|
|
VIS_CSTYLE | VIS_DQ | VIS_TAB | VIS_NL; add the latter three flags
to the existing vis encoding of exec argv/environ and pledge
requests/paths.
Delete local variables left unused when showbuf() and showbufc() were split
ok otto@ millert@
|
|
ok deraadt@ bluhm@
|
|
|
|
ioctl requests.
|
|
request and ok naddy@
|
|
for generating and parsing them.
ok mpi@ naddy@ millert@ deraadt@
|
|
stricter (per POSIX, dang it)
|
|
|
|
Remove "option COMPAT_LINUX" and everything directly tied to it from the
kernel and the corresponding man page documentation.
ok visa@ guenther@
|
|
|
|
define names. Use the mksubr infrastructure for EVFILT_*,
EV_*, and (with some kludging) NOTE_* values. If EV_ERROR is set,
include the errno string for the data member.
Also, do MSG_* parsing on the msg_flags member of struct msghdr.
ok millert@
|
|
|
|
ok deraadt@, kettenos@, guenther@
|
|
|
|
thrkill(2), rolling the kill(2) syscall number with the ABI change to
avoid breaking binaries during during the transition. thrkill(2) includes
a 'tcb' argument that eliminates the need for locking in pthread_kill()
and simplifies pthread_cancel(). Switch __stack_smash_handler() to use
thrkill(2) and explicitly unblock SIGABRT.
Minor bump to both libc and libpthread: make sure you install a new kernel!
ok semarie@
|
|
|
|
no pledge to recommend.
|
|
used less than "stdio" -- include all the "self" operations. Instead of
different defines, use regular PLEDGE_* in the "p_pledgenote" variable
(which indicates the operation subtype a system call is performing). Many
checks before easier to understand. p_pledgenote can often be passed
directly to ktrace, so that kdump says:
15565 test CALL pledge(0xa9a3f804c51,0)
15565 test STRU pledge request="stdio"
15565 test RET pledge 0
15565 test CALL open(0xa9a3f804c57,0x2<O_RDWR>)
15565 test NAMI "/tmp/testfile"
15565 test PLDG open, "wpath", errno 1 Operation not permitted
with help from semarie, ok guenther
|