Age | Commit message (Expand) | Author |
2015-10-09 | Fix line number bug when calling onlywind(). | Mark Lumsden |
2015-10-09 | Change all tame callers to namechange to pledge(2). | Theo de Raadt |
2015-10-08 | add some tame calls. we may need a bunch of permissions to create files | Ted Unangst |
2015-10-08 | tame "stdio rpath wpath cpath proc exec". make is a shell, and appears | Theo de Raadt |
2015-10-07 | use tame "stdio rpath tty", for ttyname(). from Rob Pierce, who chose to | Theo de Raadt |
2015-10-07 | from previous commit: "ioctl" is used for grab ttyname(0) | Sebastien Marie |
2015-10-07 | enable tame(2) in who(1). | Sebastien Marie |
2015-10-07 | include PubkeyAcceptedKeyTypes in ssh -G config dump | Damien Miller |
2015-10-07 | UsePrivilegeSeparation defaults to sandbox now. | Igor Sobrado |
2015-10-07 | tame "stdio rpath wpath cpath" to support use of freopen() with "w" | Theo de Raadt |
2015-10-07 | tame "stdio inet rpath wpath cpath" supports all the functions of tftp. | Theo de Raadt |
2015-10-07 | tame "stdio rpath". no uid/user resolution happening here. | Theo de Raadt |
2015-10-07 | tame "stdio wpath cpath", since tee creates & writes to a list of files | Theo de Raadt |
2015-10-07 | Oops, not quite ready for tame() here. People need time to update | Theo de Raadt |
2015-10-07 | *** empty log message *** | Theo de Raadt |
2015-10-07 | tame "stdio rpath", for the open with O_RDONLY. | Theo de Raadt |
2015-10-07 | tame "stdio rpath", satisfies the fopen cases | Theo de Raadt |
2015-10-07 | tame "stdio rpath", which covers readlink() and realpath() | Theo de Raadt |
2015-10-07 | tame "stdio"; username information does not use getpw | Theo de Raadt |
2015-10-07 | tame "stdio rpath getpw". getpw is for user_from_uid(), which is a libc | Theo de Raadt |
2015-10-07 | Couple of memory leaks in error paths, from Frederik Vanderstraeten. | Nicholas Marriott |
2015-10-07 | tame "stdio rpath". could go crazy and handle the non-filename case, | Theo de Raadt |
2015-10-07 | tame "stdio rpath" initially. if no files, go to tame "stdio". | Theo de Raadt |
2015-10-07 | tame "stdio rpath getpw" before getpwuid and opening, then tame "stdio" | Theo de Raadt |
2015-10-07 | tame "stdio rpath wpath cpath tmppath tty". "tty" is the important part | Theo de Raadt |
2015-10-07 | tame "stdio rpath wpath cpath" covers mkstemp (O_RDONLY|O_CREAT), | Theo de Raadt |
2015-10-07 | tame "stdio". It would take some doing for this to contain a bug, but | Theo de Raadt |
2015-10-07 | tame "stdio". I doubt there is a bug in the environment parsing code. | Theo de Raadt |
2015-10-07 | tame "stdio rpath wpath cpath" handles all the cases of opening files | Theo de Raadt |
2015-10-07 | patch(1) can move to "stdio rpath wpath cpath tmppath fattr proc exec" | Theo de Raadt |
2015-10-07 | tame "stdio rpath" | Theo de Raadt |
2015-10-07 | tame "stdio rpath" | Theo de Raadt |
2015-10-07 | tame "stdio rpath wpath cpath" or a more mundane "stdio rpath", depending | Theo de Raadt |
2015-10-07 | tame "stdio inet rpath cpath wpath proc" seems to be sufficient for | Theo de Raadt |
2015-10-07 | move from tame "ioctl" to tame "tty", which provides a better fit for | Theo de Raadt |
2015-10-07 | tame "stdio getpw rpath wpath tty". "tty" allows this to use | Theo de Raadt |
2015-10-07 | We continue our tour through obscure BSD <word escapes me>. This stdio-based | Theo de Raadt |
2015-10-07 | tame "stdio rpath" at the start, then potentially some files are opened. | Theo de Raadt |
2015-10-07 | tame "stdio rpath wpath cpath" to cover all the file opening cases. | Theo de Raadt |
2015-10-07 | tame "stdio rpath" for when paths are specified; otherwise tame "stdio" | Theo de Raadt |
2015-10-07 | don't try to change tun device flags if they are already what | Damien Miller |
2015-10-06 | obvious tame "stdio". For those not keeping score, this is another | Theo de Raadt |
2015-10-06 | tame "stdio rpath" if we have new files to open, otherwise tame "stdio". | Theo de Raadt |
2015-10-06 | obvious tame "stdio" | Theo de Raadt |
2015-10-06 | modernize style: "return" is not a function; ok cmp(1) | Ingo Schwarze |
2015-10-06 | Move from tame "cmsg" to tame "sendfd" or "recvfd", depending on which | Theo de Raadt |
2015-10-06 | Remove the -C option that converts an S/Key database to the new format. It has | Tim van der Molen |
2015-10-06 | Update path in comment; OK millert@ | Tim van der Molen |
2015-10-06 | only modifies data, stdin to stdout, so tame "stdout" | Theo de Raadt |
2015-10-06 | use tame "stdio rpath wpath cpath fattr". There is some timezone | Theo de Raadt |