index
:
wireguard-openbsd
jd/histogram
jd/queueboosts
jd/simplify-queueing
master
WireGuard implementation for the OpenBSD kernel
Matt Dunwoodie
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
bin
/
systrace
/
filter.c
(
follow
)
Commit message (
Expand
)
Author
Age
Files
Lines
*
boom goes the dynamite
tedu
2016-04-25
1
-868
/
+0
*
Remove NULL-check before free(). ok tb@
mmcc
2015-12-09
1
-7
/
+4
*
Convert many atoi() calls to strtonum(), adding range checks and failure
deraadt
2015-04-18
1
-3
/
+4
*
move to PATH_MAX, etc; normalize includes for life in the <limits.h> universe
deraadt
2015-01-16
1
-5
/
+5
*
remove some unnecessary sys/param.h inclusions
deraadt
2012-12-04
1
-2
/
+1
*
sync with systrace 1.6d, keeping local changes
sturm
2006-07-02
1
-4
/
+12
*
some type cleanup
sturm
2006-05-02
1
-2
/
+2
*
ARGSUSED and a FALLTHROUGH to please lint
sturm
2006-04-26
1
-1
/
+2
*
support for cradle mode by marius at monkey.org; cradle mode allows the
sturm
2004-01-23
1
-3
/
+19
*
several diffs from Niels as applied to NetBSD
sturm
2003-08-04
1
-2
/
+3
*
- sync with NetBSD or Niels' tarball where appropriate
sturm
2003-07-19
1
-5
/
+29
*
- limited number of processes per systrace
itojun
2003-06-16
1
-11
/
+9
*
>permit numberic values for uid and gid; allow "<" and ">" for less and
itojun
2003-05-29
1
-8
/
+25
*
fix for EOF in interactive policy generation.
mpech
2003-04-24
1
-2
/
+3
*
add support for regular expressions and pidname translations. from provos
itojun
2002-12-09
1
-4
/
+33
*
prevent the use of permit for aliases. from provos
itojun
2002-12-09
1
-5
/
+15
*
no need to check trans_size. from provos
itojun
2002-11-15
1
-4
/
+1
*
support for privilege elevation.
itojun
2002-10-16
1
-2
/
+6
*
correctly evaluate group predicates.
itojun
2002-10-16
1
-2
/
+2
*
predicates are part of the grammar now; in non-root case, predicates are
itojun
2002-10-09
1
-30
/
+122
*
assume that inserting a template implies permit for the current
itojun
2002-10-08
1
-2
/
+5
*
support for templates. they allow fast generation of new policies. an
itojun
2002-09-23
1
-2
/
+76
*
no \n in err
provos
2002-08-08
1
-3
/
+2
*
constify, have missing prototypes, use pedantic compilation options.
itojun
2002-07-19
1
-10
/
+18
*
support for system call aliasing. stat/fstat/readlink/access etc... gets
provos
2002-07-09
1
-6
/
+32
*
more careful buffer handling; pointed out by deraadt@
provos
2002-06-19
1
-3
/
+6
*
KNF
deraadt
2002-06-18
1
-3
/
+3
*
change a few buffers to 2*MAXPATHLEN; pob deraadt@
provos
2002-06-11
1
-2
/
+2
*
knf
todd
2002-06-09
1
-2
/
+2
*
use profiling to order filter lists more optimally.
provos
2002-06-07
1
-4
/
+17
*
fix automatic policy generation for system calls that have the same args
provos
2002-06-06
1
-37
/
+47
*
no special case of execve.
provos
2002-06-05
1
-4
/
+2
*
introduce an automatic policy generation mode. it creates a policy based
provos
2002-06-05
1
-11
/
+49
*
inpath logic, for example, filename inpath "$CWD"
provos
2002-06-05
1
-1
/
+30
*
know about CWD. will make some filter rules simpler.
provos
2002-06-05
1
-2
/
+6
*
KNF
deraadt
2002-06-04
1
-6
/
+6
*
__FUNCTION__ -> __func__ from espie@
provos
2002-06-04
1
-7
/
+7
*
initial import of systrace. don't touch this, more stuff coming in a while
provos
2002-06-04
1
-0
/
+468