Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | boom goes the dynamite | 2016-04-25 | 1 | -651/+0 | |
| | |||||
* | drop Linux emulation support; ok sthen@ visa@ | 2016-03-01 | 1 | -6/+1 | |
| | |||||
* | Remove NULL-check before free(). ok tb@ | 2015-12-09 | 1 | -3/+2 | |
| | |||||
* | move to PATH_MAX, etc; normalize includes for life in the <limits.h> universe | 2015-01-16 | 1 | -2/+3 | |
| | | | | ok guenther millert | ||||
* | a.out emulation went away | 2013-10-17 | 1 | -2/+1 | |
| | |||||
* | use FD_CLOEXEC instead of 1; from David Hill | 2013-04-29 | 1 | -2/+2 | |
| | | | | ok otto | ||||
* | LFS option is long gone | 2013-04-03 | 1 | -3/+1 | |
| | |||||
* | Add support for *at(2) system calls to systrace(1). | 2011-09-18 | 1 | -4/+7 | |
| | | | | ok deraadt@, sthen@, jasper@ | ||||
* | remove compat_svr4 | 2011-07-04 | 1 | -4/+1 | |
| | |||||
* | Remove FREEBSD_COMPAT bits and obsolete RTHREAD define | 2011-04-05 | 1 | -6/+1 | |
| | |||||
* | compat_bsdos is gone | 2010-07-05 | 1 | -4/+1 | |
| | |||||
* | remove userland bits of compat_sunos | 2010-07-02 | 1 | -4/+1 | |
| | |||||
* | another day, another compat gets removed. today is ibcs2's turn | 2010-07-01 | 1 | -4/+1 | |
| | |||||
* | remove compat_osf1. ok deraadt miod | 2010-06-30 | 1 | -4/+1 | |
| | |||||
* | Remove COMPAT_HPUX. No one wanted to support it and its fewmets were | 2010-06-29 | 1 | -10/+1 | |
| | | | | | blocking other cleanups ok miod@ | ||||
* | ultrix compat is going away... | 2010-06-29 | 1 | -4/+1 | |
| | |||||
* | remove compat netbsd stuff | 2007-05-29 | 1 | -4/+1 | |
| | |||||
* | sync with systrace 1.6d, keeping local changes | 2006-07-02 | 1 | -1/+3 | |
| | | | | tests and feedback by a few | ||||
* | some type cleanup | 2006-05-02 | 1 | -3/+3 | |
| | | | | with feedback from kettenis | ||||
* | add PTRACE and RTHREADS defines | 2006-01-01 | 1 | -1/+5 | |
| | | | | ok miod | ||||
* | #ifdef hpux only for m68k or hppa; this needs a revisit since this shows | 2004-07-09 | 1 | -1/+7 | |
| | | | | | something flawed in the way that the emulation system calls are being handled | ||||
* | oops committed the old version | 2004-07-09 | 1 | -3/+3 | |
| | |||||
* | better includes for syscalls from kernel | 2004-07-09 | 1 | -23/+23 | |
| | |||||
* | fix an issue when scripts are exec'd under systrace where | 2004-07-07 | 1 | -1/+14 | |
| | | | | | | | | | the argv[0] would be normalized, and hence break scripts that depend on how they were called. this fixes an issue in the ports builds. ok provos@ deraadt@; lots of testing during hackathon sturm@ naddy@ | ||||
* | a few fixes to systrace | 2004-06-23 | 1 | -1/+14 | |
| | | | | | | | | | | | | - add an exec message so that whenever a set-uid/gid process exec's a new image which we may control, the exec does not go by unnoticed. - take special care to check for P_SUGIDEXEC as well as P_SUGID, corresponding to the same changes that were made in the ptrace code a while ago ok niels@, sturm@; thanks to naddy for testing | ||||
* | from NetBSD: | 2003-10-22 | 1 | -2/+2 | |
| | | | | | | initialise an integer field with 0 instead of NULL ok provos, itojun, avsm, fgsch | ||||
* | originally from cb@openbsd.org, adapted by provos | 2003-10-08 | 1 | -3/+9 | |
| | | | | | | | | | | | | | itojun@ ok fix a race condition between path resolution in userland and the subsequent namei(): inform the kernel portion of valid filenames and then disallow symlink lookups for those filenames by means of a hook in namei(). with suggestions from provos@ also, add (currently unused) seqnr field to struct systrace_replace, from provos@ | ||||
* | teach systrace about "aout" emul; henning@ ok. | 2003-08-23 | 1 | -1/+2 | |
| | |||||
* | - sync with NetBSD or Niels' tarball where appropriate | 2003-07-19 | 1 | -3/+3 | |
| | | | | | | | | | - keeps local changes - fixes a bug in profile feedback optimization and avoids symbol conflicts with errno - new feature: "ask" action itojun@ ok | ||||
* | - limited number of processes per systrace | 2003-06-16 | 1 | -1/+6 | |
| | | | | | - escape fixes for special characters markus, sturm ok. from provos | ||||
* | rename to a new ioctl | 2002-12-04 | 1 | -3/+3 | |
| | |||||
* | avoid symbol conflict with "errno" | 2002-11-26 | 1 | -3/+3 | |
| | |||||
* | performance improvement by omitting a redundant getcwd. | 2002-11-26 | 1 | -19/+10 | |
| | | | | from provos | ||||
* | support for privilege elevation. | 2002-10-16 | 1 | -5/+18 | |
| | | | | | | | | | | | with privilege elevation no suid or sgid binaries are necessary any longer. Applications can be executed completely unprivileged. Systrace raises the privileges for a single system call depending on the configured policy. Idea from discussions with Perry Metzger, Dug Song and Marcus Watts. from provos | ||||
* | predicates are part of the grammar now; in non-root case, predicates are | 2002-10-09 | 1 | -1/+12 | |
| | | | | | | evaluated only once; in root case, predicates and variable expansion are dynamic. from provos | ||||
* | avoid symbol conflict (errno) | 2002-08-28 | 1 | -5/+5 | |
| | |||||
* | fix systrace with chroot. from provos | 2002-08-28 | 1 | -1/+4 | |
| | |||||
* | deal better with interrupted system calls | 2002-08-07 | 1 | -3/+9 | |
| | |||||
* | sync function decl and prototype (static-ness) | 2002-07-30 | 1 | -2/+2 | |
| | |||||
* | add seqnr to message from kernel, userland needs to quote correct seqnr. | 2002-07-22 | 1 | -11/+17 | |
| | | | | avoids problems where tsleep has been interrupted by a signal. | ||||
* | constify, have missing prototypes, use pedantic compilation options. | 2002-07-19 | 1 | -37/+59 | |
| | | | | niels ok | ||||
* | Remove kernel support for NTP. ok deraadt@ and tholo@ | 2002-07-06 | 1 | -3/+1 | |
| | |||||
* | rewrite all system call arguments in the permit case. use realpath | 2002-06-21 | 1 | -3/+53 | |
| | | | | | when we still have the root and we of the monitored process. this eliminates almost all race coniditions. | ||||
* | support attaching to a running process; some code by fries@ | 2002-06-10 | 1 | -3/+34 | |
| | |||||
* | KNF | 2002-06-04 | 1 | -4/+4 | |
| | |||||
* | no absolute includes, changed to relatives; from deraadt@ | 2002-06-04 | 1 | -23/+23 | |
| | |||||
* | __FUNCTION__ -> __func__ from espie@ | 2002-06-04 | 1 | -6/+6 | |
| | |||||
* | initial import of systrace. don't touch this, more stuff coming in a while | 2002-06-04 | 1 | -0/+510 | |