Age | Commit message (Expand) | Author |
2015-10-12 | Correctly mark-up some recent additions. ok jmc@ | Mark Lumsden |
2015-10-12 | Gahamas -> Bahamas; | Jason McIntyre |
2015-10-12 | same thing as biff, pledge "stdio rpath fattr tty" | Theo de Raadt |
2015-10-12 | biff pledges to only do "stdio rpath fattr tty". (very small program.. | Theo de Raadt |
2015-10-12 | Clear dform and dsec when exiting a first-level directory in treescan(). | Ingo Schwarze |
2015-10-12 | Fix an obvious bug found during the /* FALLTHROUGH */ cleanup: | Ingo Schwarze |
2015-10-12 | To make the code more readable, delete 283 /* FALLTHROUGH */ comments | Ingo Schwarze |
2015-10-11 | fix regression: ttyname() failure not handled right | Theo de Raadt |
2015-10-11 | now that tsort has a clean structure, do more specific pledge() calls. | Marc Espie |
2015-10-11 | Drop tags containing a blank character: | Ingo Schwarze |
2015-10-11 | -version options on commands like this make no sense; the version number | Theo de Raadt |
2015-10-11 | Finally use __progname, err(3) and warn(3). | Ingo Schwarze |
2015-10-11 | with the RPATH enforcement, csplit(1) don't work anymore on stdin... | Sebastien Marie |
2015-10-11 | reorg code to have an array with all the files used apparent. | Marc Espie |
2015-10-11 | handle comma separated list of arguments, i.e. pkg-config --exists gcr-3,gcr-... | Jasper Lievisse Adriaanse |
2015-10-11 | fix a regression spotted by chris@. the -f and -I arguments fetch process | Theo de Raadt |
2015-10-11 | Userspace doesn't need to use SUN_LEN(): connect() and bind() must accept | Philip Guenther |
2015-10-10 | Initial support for pledges in openssl(1) commands. | Doug Hogan |
2015-10-10 | another pledge argument reorder for sake of re-audit | Theo de Raadt |
2015-10-10 | Fix YP user and group support in getent(1). | Doug Hogan |
2015-10-10 | pledge "stdio rpath wpath cpath" | Theo de Raadt |
2015-10-10 | env(1) is obviously a program falling into pledge "stdio exec". It | Theo de Raadt |
2015-10-10 | pledge "stdio inet rpath" seems to be enough for a YP environment. | Theo de Raadt |
2015-10-10 | pledge "stdio rpath wpath cpath proc exec"; this spawns cpp. | Theo de Raadt |
2015-10-10 | normalize a few more tame request orderings, to help review | Theo de Raadt |
2015-10-10 | normalize the ordering of tame requests (particularily, "rpath wpath cpath", | Theo de Raadt |
2015-10-10 | Add pledge support in awk and make awk -safe actually safe. | Doug Hogan |
2015-10-10 | Rather than invoking fork/execve of dc(1) on a pipe, compile in the dc(1) | Theo de Raadt |
2015-10-10 | since kdump may getprotobynumber() late, do not drop "rpath". We could | Theo de Raadt |
2015-10-10 | pledge "stdio rpath wpath cpath" | Theo de Raadt |
2015-10-10 | pledge "stdio getpw rpath wpath cpath tmppath proc exec". doug pointed out | Theo de Raadt |
2015-10-10 | pledge "stdio rpath wpath cpath proc exec". there is some potential | Theo de Raadt |
2015-10-10 | pledge "stdio rpath" | Theo de Raadt |
2015-10-10 | pledge "stdio getpw rpath wpath cpath fattr". doug pointed out getpw* | Theo de Raadt |
2015-10-10 | encrypt(1) also needs to pledge "wpath" for getpass(). | Doug Hogan |
2015-10-10 | pledge "stdio rpath tty". rpath for the configuration reading done by | Theo de Raadt |
2015-10-10 | pledge "stdio proc exec" works. | Theo de Raadt |
2015-10-10 | plege "stdio rpath tty". "tty" is for the curses code lurking in the | Theo de Raadt |
2015-10-10 | pledge "stdio rpath proc exec". proc & exec because obviously it | Theo de Raadt |
2015-10-10 | basic pledge "stdio rpath" | Theo de Raadt |
2015-10-10 | pledge "stdio rpath" seems to work; ok doug | Theo de Raadt |
2015-10-10 | pledge "stdio proc exec". relies on two recent kernel fixes. | Theo de Raadt |
2015-10-10 | must also pledge "getpw", because it will use getpw* and getgr* functions. | Theo de Raadt |
2015-10-10 | pledge "stdio rpath route" seems to be working. route is needed for | Theo de Raadt |
2015-10-10 | pledge "stdio rpath wpath cpath". as a curses program, I expected this | Theo de Raadt |
2015-10-10 | pkill has to get all the getopt, getpwuid, libkvm stuff out of the way | Theo de Raadt |
2015-10-10 | fairly obvious pledges. | Theo de Raadt |
2015-10-10 | fairly simple pledge to "stdio rpath wpath cpath" | Theo de Raadt |
2015-10-10 | Decide whether to use_pager as early as possible, | Ingo Schwarze |
2015-10-10 | Make functions that accept multiple iterations via C-u N, honour 0. | Mark Lumsden |