| Age | Commit message (Expand) | Author | Files | Lines |
| 2015-10-16 | wrap a long line |  deraadt | 1 | -2/+3 |
| 2015-10-16 | Implement real "flock" request and add it to userland programs that |  millert | 1 | -2/+2 |
| 2015-10-16 | Add allocarray(), an overflow-safe allocation function. |  mmcc | 1 | -1/+26 |
| 2015-10-15 | Remove three distracting aliases for NULL. |  mmcc | 2 | -15/+11 |
| 2015-10-15 | Remove an unused included header (sys/stat.h). |  mmcc | 1 | -2/+1 |
| 2015-10-15 | Introduce an unsigned char variable for the ctype function calls. |  mmcc | 1 | -5/+7 |
| 2015-10-14 | Use a strict $PATH of "/usr/bin:/usr/local/bin" to run the (de)compressors |  deraadt | 1 | -1/+5 |
| 2015-10-13 | revert previous. changes the behaviour of: |  daniel | 2 | -25/+14 |
| 2015-10-12 | reenable pledge(2) on pax, but only if pmode isn't in use or if action |  semarie | 1 | -6/+6 |
| 2015-10-12 | indent the builtin text a little, for naddy; |  jmc | 1 | -3/+3 |
| 2015-10-12 | Revert the pledge() call on pax/ar_io.c for now. |  semarie | 1 | -1/+3 |
| 2015-10-12 | preservation modes can adjust setugid bits, so no pledge is possible. |  deraadt | 2 | -2/+23 |
| 2015-10-11 | Don't return errno from main() |  guenther | 1 | -2/+2 |
| 2015-10-11 | pledge "stdio tty" works once the kernel allows TIOCGWINSZ. Do the pledge |  deraadt | 1 | -3/+11 |
| 2015-10-11 | Don't allow "rm -rf /" |  daniel | 2 | -14/+25 |
| 2015-10-10 | Pledge that ln only needs "stdio rpath cpath". |  doug | 1 | -1/+4 |
| 2015-10-10 | Add a define for the invalid state, from mksh via Michael McConville. |  nicm | 1 | -2/+3 |
| 2015-10-10 | Kill pledges to only use "stdio proc". |  doug | 1 | -1/+5 |
| 2015-10-10 | normalize a few more tame request orderings, to help review |  deraadt | 1 | -2/+2 |
| 2015-10-10 | normalize the ordering of tame requests (particularily, "rpath wpath cpath", |  deraadt | 2 | -4/+4 |
| 2015-10-10 | Replace calls to x_emacs_putbuf() with x_do_ins() since all |  millert | 1 | -17/+3 |
| 2015-10-10 | Unused macros; from Michael McConville. |  nicm | 1 | -4/+1 |
| 2015-10-10 | Move more declarations out of proto.h into better headers, from Michael |  nicm | 3 | -19/+19 |
| 2015-10-10 | ksh can run with pledge "stdio rpath wpath cpath getpw fattr proc exec tty" |  deraadt | 3 | -3/+13 |
| 2015-10-09 | The variable errmsg can be static in main.c if code in re.c uses an own |  tobias | 3 | -6/+7 |
| 2015-10-09 | Define functions as static when they are not used outside their own c-files. |  tobias | 6 | -55/+56 |
| 2015-10-09 | Lexer states are not needed outside of lex.c. |  millert | 2 | -20/+20 |
| 2015-10-09 | Mark static globals that are only used in their respective .c files. |  millert | 7 | -41/+41 |
| 2015-10-09 | remove null check before afree. from Michael McConville |  tedu | 7 | -33/+20 |
| 2015-10-09 | pare down the readme so as to not imply we are tracking upstream. |  tedu | 1 | -144/+3 |
| 2015-10-09 | Change all tame callers to namechange to pledge(2). |  deraadt | 19 | -64/+64 |
| 2015-10-08 | stop trying to gift history files to the original owner. instead, don't |  tedu | 1 | -7/+6 |
| 2015-10-08 | little cleanup from Michael McConville, mostly related to stale comments. |  tedu | 1 | -20/+12 |
| 2015-10-08 | the -P flag overwrites files, so it needs tame "stdio rpath wpath cpath". |  deraadt | 1 | -1/+9 |
| 2015-10-08 | Try again. Both -R and -p prevent use of tame, but other cases can use it. |  deraadt | 1 | -1/+9 |
| 2015-10-08 | ah, fchflags. We will come back to this issue later |  deraadt | 1 | -6/+1 |
| 2015-10-07 | tame "stdio cpath". The cpath is for rmdir(). Tame bundles all the system |  deraadt | 1 | -1/+4 |
| 2015-10-07 | We cannot tame if -R is specified, because mknod and mkfifo may be called. |  deraadt | 1 | -1/+6 |
| 2015-10-07 | tame "stdio cpath rpath fattr", unless mkdir -m is passed a mode which |  deraadt | 1 | -1/+6 |
| 2015-10-07 | tame "stdio rpath wpath". rpath is for localtime() and mktime(), |  deraadt | 1 | -1/+4 |
| 2015-10-07 | tame "stdio rpath wpath cpath proc exec tty". proc and exec because ed |  deraadt | 1 | -1/+5 |
| 2015-10-06 | Remove an old and broken test snippet, from Michael McConville. ok millert |  nicm | 1 | -25/+1 |
| 2015-10-06 | Drop the silly and distracting ACCEPT and REJECT macros, from Michael |  nicm | 1 | -26/+24 |
| 2015-10-06 | Move tree.c protos into tree.h, from Michael McConville, ok millert |  nicm | 2 | -10/+10 |
| 2015-10-06 | we're running rm. call it rm too. |  tedu | 1 | -2/+2 |
| 2015-10-05 | Remove EXTERN from lex.h and put the definitions in lex.c, from Michael |  nicm | 2 | -9/+19 |
| 2015-10-05 | Remove EXTERN from table.h and put the definitions in table.c, from |  nicm | 2 | -14/+26 |
| 2015-10-05 | tame "stdio rpath" works for all use cases of pwd(1). In part this |  deraadt | 1 | -1/+4 |
| 2015-10-04 | expr can use tame "stdio" |  deraadt | 1 | -1/+5 |
| 2015-10-04 | ls can use tame "stdio rpath getpw". It does uid/gid lookups, using |  deraadt | 1 | -1/+4 |