| 2015-10-12 |
semarie | Revert the pledge() call on pax/ar_io.c for now. |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
deraadt | do not umask() [with the wrong umask] around mkstemp... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
lum | Correctly mark-up some recent additions. ok jmc@ |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
deraadt | pledge "stdio" after opening files, code is very simila... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
reyk | Move execution of the constraints from the ntp to the... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
jmc | Gahamas -> Bahamas; |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
deraadt | pledge "stdio" after opening up the input & output... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
guenther | unifdef EVP_CHECK_DES_KEY: Ben Kaduk noticed it has... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
deraadt | same thing as biff, pledge "stdio rpath fattr tty" |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
deraadt | biff pledges to only do "stdio rpath fattr tty". ... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
deraadt | fstat() of opened fd, rather than stat(), to avoid... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
deraadt | preservation modes can adjust setugid bits, so no pledg... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
deraadt | does not need ioctl.h |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
semarie | with the RPATH enforcement, acpidump(1) don't work... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
deraadt | pledge to only use "stdio rpath"; rpath is for readig... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
deraadt | tunefs can pledge to only use "stdio", after it has... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
deraadt | pledge "stdio" right after opening the device. The... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
deraadt | pledge() "stdio" includes trusting open&read of the... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
schwarze | make description of ERRORS more complete; |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
schwarze | remove useless quoting from .Fo arguments; forgotten... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
schwarze | Clear dform and dsec when exiting a first-level directo... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
schwarze | Fix an obvious bug found during the /* FALLTHROUGH... |
commit | commitdiff | tree | snapshot |
| 2015-10-12 |
schwarze | To make the code more readable, delete 283 /* FALLTHROU... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
bluhm | Pass unsigned char to isdigit(3). |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
deraadt | fix regression: ttyname() failure not handled right |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
deraadt | pledge_ioctl_check() will do the killing if neccessary... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
espie | now that tsort has a clean structure, do more specific... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
schwarze | Drop tags containing a blank character: |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
schwarze | Do not insert whitespace into syntax displays, it's... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
schwarze | Fix empty .No macros, use .Pf to prefix delimiters... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
deraadt | -version options on commands like this make no sense... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
schwarze | Finally use __progname, err(3) and warn(3). |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
guenther | Userspace doesn't need to use SUN_LEN(): connect()... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
guenther | Don't return errno from main() |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
sthen | Handle the blackhole well-known community in bgpctl... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
phessler | standardize a community that has been independently... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
phessler | some peers are following an expired draft RFC and are... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
phessler | add "best" as an alias for "selected" |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
doug | Pledge that ncheck_ffs only uses "stdio" after opening... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
schwarze | Mention that the first argument of .Pf does not need... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
semarie | with the RPATH enforcement, csplit(1) don't work anymor... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
espie | reorg code to have an array with all the files used... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
semarie | add a missed check for PLEDGE_RPATH when reading a... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
deraadt | sigaltstack is directly used by setjmp on some architec... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
deraadt | put TIOCSWINSZ in the right block "tty", not in "ioctl... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
deraadt | needs at least some include love; choosing <stdlib.h> |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
deraadt | pledge "stdio tty" works once the kernel allows TIOCGWI... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
deraadt | In pledge "tty", allow TIOCSWINSZ. stty(1) is the... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
sunil | Convert some fgetln to getline. |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
sunil | Convert some fgetln to getline. |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
jasper | handle comma separated list of arguments, i.e. pkg... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
jasper | add variation on existing --exists tests; separated... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
stsp | Add a symbolic name for the special '-1' value of iwm... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
guenther | Document that execve(2) resets SIGCHLD to SIG_DFL |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
guenther | Prefer .Fa over .Em for struct members |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
guenther | Simplify and lock down priv_open(): |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
guenther | Document that bind(2) and connect(2) ignore the incomin... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
guenther | YYSTYPE.number is int64_t, so format with <inttypes... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
deraadt | After the filesystem is opened, pledge "stdio" |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
deraadt | If only displaying the disklabel (the normal thing... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
deraadt | After the disk is opened, this can pledge "stdio". |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
guenther | The <ctype.h> is*() interfaces expect EOF or an unsigne... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
daniel | Don't allow "rm -rf /" |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
deraadt | fix a regression spotted by chris@. the -f and -I... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
guenther | __get_tcb() is needed for errno access in threaded... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
guenther | Always set the timeout at least one tick in the future... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
guenther | Userspace doesn't need to use SUN_LEN(): connect()... |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
guenther | Prefer dprintf() over snprintf()+write() |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
guenther | Use correct terminology |
commit | commitdiff | tree | snapshot |
| 2015-10-11 |
guenther | Document support for CPU power states |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
guenther | Convert FIONBIO to SOCK_NONBLOCK |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
doug | Pledge that ln only needs "stdio rpath cpath". |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | pflogd contained the same "privsep error" as tcpdump... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
doug | Pledge that arithmetic only takes "stdio". |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
doug | Initial support for pledges in openssl(1) commands. |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | pledge "stdio rpath wpath cpath fattr inet" after chroo... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | pledge "stdio route"; untested. this has the if_nameto... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
nicm | Add a define for the invalid state, from mksh via Micha... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | another pledge argument reorder for sake of re-audit |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
doug | Fix YP user and group support in getent(1). |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | pledge "stdio rpath wpath cpath" |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | env(1) is obviously a program falling into pledge ... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
doug | Kill pledges to only use "stdio proc". |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | pledge "stdio inet rpath" seems to be enough for a... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | pledge "stdio rpath wpath cpath proc exec"; this spawns... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
tobias | Added missing curly bracket into LIST_EMPTY example. |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | normalize a few more tame request orderings, to help... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | normalize the ordering of tame requests (particularily... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | pledge "dns rw" is not a reliable pattern. This means... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
doug | Add pledge support in awk and make awk -safe actually... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | Rather than invoking fork/execve of dc(1) on a pipe... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | since kdump may getprotobynumber() late, do not drop... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | For pledge, sigsuspend() should is affecting the behavi... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | pid 0 also implies self, so allow that for the pledge... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | pledge "stdio rpath wpath cpath" |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | pledge "stdio getpw rpath wpath cpath tmppath proc... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
stsp | In iwm(4), set mbuf pointers to NULL after freeing... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | pledge "stdio rpath wpath cpath proc exec". there is... |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | pledge "stdio rpath" |
commit | commitdiff | tree | snapshot |
| 2015-10-10 |
deraadt | pledge "stdio getpw rpath wpath cpath fattr". doug... |
commit | commitdiff | tree | snapshot |
| next |
projects / openbsd / shortlog