Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Document futex(2) with a lot of inputs from schwarze@ | 2017-04-28 | 1 | -0/+134 | ||
| | ||||||
* | Document RB_TIMEBAD; delete RB_* that are obsolete/unimplemented | 2017-04-15 | 1 | -19/+5 | ||
| | | | | ok visa@ deraadt@ | |||||
* | Xr sigprocmask(2) not the obsolete sigsetmask(3) | 2017-04-13 | 1 | -3/+3 | ||
| | ||||||
* | Fix tabs in example code. | 2017-04-10 | 1 | -3/+3 | ||
| | ||||||
* | Not all devices support mmap, document EINVAL in this case too. | 2017-04-05 | 1 | -2/+6 | ||
| | | | | OK deraadt@ | |||||
* | tweak previous; | 2017-04-04 | 1 | -4/+4 | ||
| | ||||||
* | Add caveat telling it's better to always read a data byte when passing | 2017-04-03 | 1 | -2/+14 | ||
| | | | | | control messages. Problem noted by Luke Small; ok deraadt@ | |||||
* | The hppa version of as(1) requires whitespace before a .file directive, | 2017-03-29 | 1 | -2/+2 | ||
| | | | | | | | it may not be in column 0. This kind of thing is very common in GNU and Linux software because the software was written from the start to be 'compatible replacements' of vendor software. ok jsing guenther | |||||
* | Document the mcast pledge(2) as an addition to inet. | 2017-03-28 | 1 | -2/+8 | ||
| | | | | OK deraadt@ | |||||
* | Use .file to convince 'as' to generate proper FILE symbols in the syscall | 2017-03-26 | 1 | -7/+8 | ||
| | | | | | | | | stubs that aren't actually in files, so that syspatch can figure out what order the syscall stub objects are in the .so. Use -P to suppress to #line directives that would override that. Tested with both gcc/gas and clang. ok deraadt@ | |||||
* | mkdir(2) and mkdirat(2) can also fail with EACCESS if write permission | 2017-03-23 | 1 | -3/+5 | ||
| | | | | | is denied on the parent directory of the directory to be created. From FreeBSD. OK deraadt@ natano@ | |||||
* | shuffle back: wxabort is described in sysctl(3); | 2017-03-11 | 2 | -4/+4 | ||
| | ||||||
* | repair Xr, and point to sysctl(8) instead because sysctl(3) fails to | 2017-03-11 | 2 | -6/+8 | ||
| | | | | | document kern.wxabort from michael reed | |||||
* | document EPERM error when connect(2)ing. | 2017-03-02 | 1 | -2/+5 | ||
| | | | | ok bluhm@ jmc@ renato@ | |||||
* | use Dv, for consistency; from bruno flueckiger | 2017-02-27 | 1 | -3/+3 | ||
| | ||||||
* | Missing opening brace. Spotted by Hiltjo Posthuma. | 2017-02-14 | 1 | -3/+3 | ||
| | ||||||
* | return the sio_open notes to the audio section; from michael reed | 2017-01-29 | 1 | -6/+6 | ||
| | ||||||
* | whitespace between macro args and punctuation, and zap a ton | 2017-01-23 | 1 | -42/+42 | ||
| | | | | of unneccessary quoting; ok deraadt | |||||
* | Split pledge "ioctl" into "tape" and "bpf", and allow SIOCGIFGROUP only | 2017-01-23 | 1 | -24/+28 | ||
| | | | | upon "inet". Adjust the 4 programs that care about this. | |||||
* | For consistency, allow symlinkat(2) in the same way as symlink(2); | 2016-10-27 | 1 | -4/+5 | ||
| | | | | | | no need to wait until the first program using it breaks... "could make sense" semarie@ (and thanks for the cluestick) OK deraadt@ | |||||
* | note that SO_REUSEADDR is restricted to callers with the same uid or root; | 2016-10-19 | 1 | -4/+5 | ||
| | | | | | | | while there, super-user -> superuser for internal consistency; diff from kirill miazine, tweaked by myself; ok deraadt millert guenther | |||||
* | rss limit is no longer enforced. noticed by Raimo Niskanen | 2016-10-07 | 1 | -5/+3 | ||
| | ||||||
* | Make read(2) return EISDIR on directories. | 2016-09-30 | 1 | -4/+6 | ||
| | | | | | | | | | | | Years ago Theo made read(2) return 0 on directories, instead of dumping the directory content. Another behavior is allowed as an extension by POSIX, returning an EISDIR error, as used on a few other systems. This behavior is deemed more useful as it helps spotting errors. This implies that it might break some setups. Ports bulk builds by ajacoutot@ and naddy@, ok millert@ bluhm@ naddy@ deraadt@ | |||||
* | Restore warnings about multiple process waiting on same fd | 2016-09-17 | 2 | -4/+16 | ||
| | | | | | requested by mpf@ ok deraadt tedu@ | |||||
* | spelling; from Frank Schoep | 2016-09-13 | 1 | -4/+4 | ||
| | ||||||
* | document that running a W^X violating binary from file system mounted | 2016-09-12 | 1 | -2/+11 | ||
| | | | | without wxallowed causes EACCES | |||||
* | correct wording; from rob@2keys.ca | 2016-09-05 | 1 | -3/+3 | ||
| | ||||||
* | Don't list individual valid CLOCK_* values, instead refer to | 2016-09-03 | 1 | -6/+5 | ||
| | | | | | | clock_gettime(2). ok guenther@ | |||||
* | remove references to sparc | 2016-09-01 | 2 | -8/+8 | ||
| | ||||||
* | Update list of ioctls for the audio promise. Suggested by jmc@, thanks. | 2016-09-01 | 1 | -7/+6 | ||
| | ||||||
* | fix obvious typo in the .Dt section number | 2016-08-21 | 1 | -3/+3 | ||
| | ||||||
* | Sync connect_wait() example with its real usage in ftp(1). | 2016-08-20 | 1 | -22/+18 | ||
| | ||||||
* | Add an EXAMPLES section that illustrates how to deal with connect(2) | 2016-08-18 | 1 | -2/+52 | ||
| | | | | returning EINTR. OK jung@ deraadt@ | |||||
* | modern interfaces should use modern speelings, so spell quad_t as int64_t. | 2016-08-13 | 1 | -3/+3 | ||
| | ||||||
* | Expand the asynchronous connect information and move it out of | 2016-08-09 | 1 | -14/+32 | ||
| | | | | | ERRORS and into a new second paragraph. Adapted from NetBSD. OK deraadt@ jmc@ | |||||
* | Document that connect goes async when interrupted by signal. | 2016-08-09 | 1 | -7/+5 | ||
| | ||||||
* | DEBUGLIBS has been broken since the gcc4 switch, so delete it. CFLAGS | 2016-07-04 | 1 | -12/+1 | ||
| | | | | | | | contains -g by default anyway problem noted by Edgar Pettijohn (edgar (at) pettijohn-web.com) ok millert@ kettenis@ deraadt@ | |||||
* | introduces new promise "chown" to allow changing owner/group with *chown(2) family | 2016-07-03 | 1 | -2/+6 | ||
| | | | | | | | | | | | | it splits PLEDGE_FATTR in two ("fattr" stills grant the 2 flags, so no functional changes): - PLEDGE_CHOWN : to be able to call *chown(2) syscalls - PLEDGE_FATTR : the rest it introduces "chown" which grant: - PLEDGE_CHOWN : be able to call *chown(2) - PLEDGE_CHOWNUID : be able to modifying owner/group ok deraadt@ tedu@ | |||||
* | Update column width decision | 2016-06-18 | 1 | -2/+2 | ||
| | ||||||
* | Document KTRFAC_{PLEDGE,EXEC{ARGS,ENV}} | 2016-06-18 | 1 | -2/+14 | ||
| | ||||||
* | On localhost a user program may create a socket splicing loop. | 2016-06-13 | 1 | -2/+6 | ||
| | | | | | | | | After writing data into this loop, it was spinning forever causing a kernel hang. Detect the loop by counting how often the same mbuf is spliced. If that happens 128 times, assume that there is a loop and abort the splicing with ELOOP. Bug found by tedu@; OK tedu@ millert@ benno@ | |||||
* | remove historic note about multiple processes. mostly irrelevant today. | 2016-06-07 | 2 | -18/+4 | ||
| | | | | ok deraadt millert | |||||
* | Document EINVAL when unlinking "." with the AT_REMOVEDIR flag. | 2016-06-01 | 1 | -2/+11 | ||
| | ||||||
* | rmdir(2) should return EINVAL not EBUSY when trying to remove ".". | 2016-06-01 | 1 | -3/+6 | ||
| | | | | | This brings us back in conformance with POSIX rmdir(2) and rmdirat(2). OK kettenis@ | |||||
* | correct documentation for PT_WRITE_I. it may be necessary to flush icache. | 2016-05-31 | 1 | -4/+5 | ||
| | | | | after explanation from kettenis | |||||
* | Move __getcwd from ASM to HIDDEN: we don't want the literal __getcwd symbol | 2016-05-30 | 1 | -3/+3 | ||
| | | | | ok millert@ deraadt@ | |||||
* | We no longer have syscalls with multiple return values. Whine about | 2016-05-30 | 1 | -5/+7 | ||
| | | | | long long alignment instead. | |||||
* | Prefer AF_* over PF_* and 'address family' over 'protocol family' | 2016-05-29 | 1 | -4/+4 | ||
| | | | | ok jung@ | |||||
* | W^X violations are no longer permitted by default. A kernel log message | 2016-05-27 | 3 | -6/+37 | ||
| | | | | | | | | | | | | | | | | is generated, and mprotect/mmap return ENOTSUP. If the sysctl(8) flag kern.wxabort is set then a SIGABRT occurs instead, for gdb use or coredump creation. W^X violating programs can be permitted on a ffs/nfs filesystem-basis, using the "wxallowed" mount option. One day far in the future upstream software developers will understand that W^X violations are a tremendously risky practice and that style of programming will be banished outright. Until then, we recommend most users need to use the wxallowed option on their /usr/local filesystem. At least your other filesystems don't permit such programs. ok jca kettenis mlarkin natano | |||||
* | Add ASM_NOERR for syscalls that never fail and thus don't need the errno | 2016-05-19 | 1 | -15/+36 | ||
| | | | | | | | setting logic...which can significantly reduce the size of the stub on some archs; 20 syscalls get a trim with this. in snaps for a bit and ok deraadt@ |