summaryrefslogtreecommitdiff
path: root/usr.bin/ssh/sandbox-systrace.c
AgeCommit message (Expand)Author
2014-07-17ifdef SYS_sendsyslog so this will compile without patching on -stableDamien Miller
2014-07-11Permit use of SYS_sendsyslog from inside the sandbox. Clock is ticking,Theo de Raadt
2014-06-18Now that we have a dedicated getentropy(2) system call forMatthew Dempsky
2014-06-13permit SYS_getentropyTheo de Raadt
2014-01-31replace most bzero with explicit_bzero, except a few that cna be memsetTed Unangst
2014-01-30allow shutdown(2) syscall in sandbox - it may be called by packet_close()Damien Miller
2013-06-01Use clock_gettime(CLOCK_MONOTONIC ...) for ssh timers so that things likeDarren Tucker
2012-06-30fix a during the load of the sandbox policies (child can still makeMarkus Friedl
2012-06-26Add mquery to the list of allowed syscalls for "UsePrivilegeSeparationDarren Tucker
2011-07-29fail open(2) with EPERM rather than SIGKILLing the whole process. libcDamien Miller
2011-06-23rename sandbox.h => ssh-sandbox.h to make things easier for portableDamien Miller
2011-06-22$OpenBSD$ makersDamien Miller
2011-06-22introduce sandboxing of the pre-auth privsep child using systrace(4).Damien Miller