Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | rob pierce spotted a mistake left by jmc | 2015-11-18 | 1 | -3/+3 | ||
| | ||||||
* | minor tweaks; | 2015-11-16 | 2 | -4/+4 | ||
| | ||||||
* | Permit revoke(2) for a pledge "rpath tty" | 2015-11-16 | 1 | -2/+9 | ||
| | | | | ok millert semarie tedu guenther | |||||
* | Only perform revoke(2) on tty cdevs. Others paths return ENOTTY. | 2015-11-16 | 1 | -6/+13 | ||
| | | | | ok millert semarie tedu guenther | |||||
* | update NAME section to include all documented functions, | 2015-11-10 | 2 | -6/+15 | ||
| | | | | | | or otherwise change Dt to reflect the name of an existing function; feedback/ok schwarze | |||||
* | Split the intra-thread functionality from kill(2) into its own syscall | 2015-11-10 | 3 | -8/+112 | ||
| | | | | | | | | | | | | thrkill(2), rolling the kill(2) syscall number with the ABI change to avoid breaking binaries during during the transition. thrkill(2) includes a 'tcb' argument that eliminates the need for locking in pthread_kill() and simplifies pthread_cancel(). Switch __stack_smash_handler() to use thrkill(2) and explicitly unblock SIGABRT. Minor bump to both libc and libpthread: make sure you install a new kernel! ok semarie@ | |||||
* | libc.so can't be unloaded, so move the hidden atexit() and pthread_atfork() | 2015-11-10 | 1 | -1/+15 | ||
| | | | | | | | | | | | stubs for the executable from crtbegin.o into libc, which lets them be excluded from static links that don't use them. For this, drop the normal crt{begin,end}S.o from libc.so: the .init and .fini sections for libc aren't called at the right times anyway, so it's good that they're unused. libc.so just needs __guard_local and the .note.openbsd.ident section, so add them to stack_protector.c for now (this will be improved) "good time" deraadt@ | |||||
* | add missing NAME entries; | 2015-11-07 | 4 | -12/+29 | ||
| | ||||||
* | Remove needless comma. | 2015-11-06 | 1 | -3/+3 | ||
| | ||||||
* | Improve explanations throughout | 2015-11-03 | 1 | -108/+79 | ||
| | ||||||
* | systrace should work now | 2015-11-03 | 1 | -8/+2 | ||
| | ||||||
* | kill 0 has worked for ages, no idea how the man page could be so innacurate so long; ok guenther | 2015-11-02 | 1 | -11/+2 | ||
| | ||||||
* | replace "can not" with "cannot"; | 2015-11-01 | 1 | -3/+3 | ||
| | ||||||
* | update text to be more like posix, in particular wrt length = 0 | 2015-10-29 | 1 | -18/+9 | ||
| | ||||||
* | Move the _atfork_list definition to atexit.c so that the fork syscall stub | 2015-10-25 | 1 | -4/+1 | ||
| | | | | | | doesn't get pulled into all static executables ok millert@ jca@ | |||||
* | Unify all the errno names in | 2015-10-24 | 1 | -4/+4 | ||
| | | | | | | | | - include comment - libc errlist - nls C msg - man page OK tedu@ | |||||
* | remove a paste error and get section numbers right for sysctl(3); | 2015-10-24 | 1 | -5/+4 | ||
| | ||||||
* | Merge the sigaction() and sigprocmask() overloads/wrappers from libpthread | 2015-10-23 | 4 | -4/+124 | ||
| | | | | | | | | | into libc, and move pthread_sigmask() as well (just a trivial wrapper). This provides consistent handling of SIGTHR between single- and multi-threaded programs and is a step in the merge of all the libpthread overloads, providing some ASM and Makefile bits that the other wrappers will need. ok deraadt@ millert@ | |||||
* | Add 3 new pledge requests. "ps" exposes enough sysctl information for | 2015-10-23 | 1 | -2/+24 | ||
| | | | | | | | ps-style programs (there are quite a few in the tree, including tmux). "vminfo" exposes a bit more system operation information, which many observation programs want (such as top). settime allows setting the system time, and will be used to pledge-protect the last ntpd process. | |||||
* | Remove dnssocket() and dnsconnect(), since we decided to use a SOCK_DNS | 2015-10-23 | 1 | -3/+3 | ||
| | | | | | flag instead. ok guenther tedu semarie | |||||
* | document "id" request; from Gregor Best | 2015-10-22 | 1 | -2/+16 | ||
| | ||||||
* | Document SOCK_DNS flag | 2015-10-20 | 1 | -2/+13 | ||
| | | | | ok guenther tedu semarie | |||||
* | Remove old tame() stub | 2015-10-19 | 2 | -18/+2 | ||
| | ||||||
* | create libc stubs for dnssocket() and dnsconnect() | 2015-10-18 | 1 | -3/+3 | ||
| | ||||||
* | Document flock request | 2015-10-14 | 1 | -2/+12 | ||
| | ||||||
* | new sentence, new line; | 2015-10-13 | 1 | -5/+6 | ||
| | | | | do not Xr self; | |||||
* | satisfy jmc! | 2015-10-12 | 1 | -6/+5 | ||
| | ||||||
* | Add details about a variety of semantics; going to keep adding and then | 2015-10-12 | 1 | -11/+51 | ||
| | | | | reevaluate the direction of this manual page a bit later. | |||||
* | Make it clear that umask ignores everything but the rwx bits. | 2015-10-12 | 1 | -8/+15 | ||
| | | | | OK deraadt@ | |||||
* | pledge wasn't called pledge in 5.8, and it was disabled; | 2015-10-12 | 1 | -3/+3 | ||
| | | | | issue noticed by tim@, solution suggested by deraadt@ | |||||
* | make description of ERRORS more complete; | 2015-10-12 | 1 | -4/+11 | ||
| | | | | | diff from Benny Lofgren <bl dash lists at lofgren dot biz>; ok nicm@ | |||||
* | Document that execve(2) resets SIGCHLD to SIG_DFL | 2015-10-11 | 2 | -8/+21 | ||
| | | | | wordsmithing and ok jmc@ | |||||
* | Prefer .Fa over .Em for struct members | 2015-10-11 | 2 | -6/+6 | ||
| | | | | ok jmc@ | |||||
* | Document that bind(2) and connect(2) ignore the incoming sa_len | 2015-10-11 | 2 | -6/+14 | ||
| | | | | | suggest by and ok deraadt@ wordsmithing jmc@ | |||||
* | do not use weak; plus this dies next week | 2015-10-09 | 1 | -2/+1 | ||
| | ||||||
* | oops, typo spotted in temporary .c file, by semarie | 2015-10-09 | 1 | -2/+2 | ||
| | ||||||
* | tame -> pledge conversion, in libc. I should crank libc, but am cheating | 2015-10-09 | 3 | -17/+34 | ||
| | | | | | | hoping things go well. The old symbol is faked via a stupid stub function, until next major crank when it can be removed. I am expecting guenther to scream at me. | |||||
* | mention sendto(2) destination address restriction for "rw" | 2015-10-04 | 1 | -2/+7 | ||
| | | | | subset; ok deraadt, feedback & ok jmc | |||||
* | implement new "prot_exec" tame(2) request: | 2015-09-30 | 1 | -3/+15 | ||
| | | | | | | | | | | | - by default, a tamed-program don't have the possibility to use PROT_EXEC for mmap(2) or mprotect(2) - for that, use the request "prot_exec" (that could be dropped later) initial idea from deraadt@ and kettenis@ "make complete sense" beck@ ok deraadt@ | |||||
* | oops - avoid Xr to self; sorry sebastien... | 2015-09-26 | 1 | -2/+2 | ||
| | ||||||
* | mentions that using systrace(4) on a tame(2) program isn't possible. | 2015-09-26 | 1 | -2/+8 | ||
| | | | | | | with big help from jmc for phrasing. ok jmc@ | |||||
* | add a small hint that you'll get EBUSY if you forget to wait. ok guenther | 2015-09-24 | 1 | -3/+3 | ||
| | ||||||
* | Add STANDARDS section and another EINVAL reason | 2015-09-21 | 1 | -2/+12 | ||
| | ||||||
* | KNF | 2015-09-14 | 1 | -2/+3 | ||
| | ||||||
* | Rename __sysctl syscall to just sysctl, as the userland wrapper is no longer | 2015-09-13 | 1 | -4/+4 | ||
| | | | | | | necessary ok deraadt@ jsing@ | |||||
* | Make these timer_* stubs weak symbols | 2015-09-12 | 5 | -16/+19 | ||
| | | | | Provide declarations to reduce noise when using -Wmissing-prototypes | |||||
* | Use PROTO_NORMAL() on __syscall to go direct, adjusting the declaration | 2015-09-11 | 10 | -77/+55 | ||
| | | | | | | | to eliminate some casts. Retire some uses of old-style STUB* macros where superseded by namespace.h bits tweaks and ok deraadt@ | |||||
* | change remaining mentions of "flags" to "request" and adapt text | 2015-09-11 | 1 | -7/+7 | ||
| | | | | nearby. Spotted by Ross Richardson. | |||||
* | Pull in namespace.h when building all .c files using gcc's -include option, | 2015-09-10 | 1 | -5/+3 | ||
| | | | | | | | | so that we can provide asm labels for the memcpy/memset/__stack_smash_handler calls that it generates ab initio. Eliminate direct #includes of it. Make sure it's a dependency of all objects (unnecessary for asm, but close enough). ok deraadt@ | |||||
* | use .In rather than .Fd #include | 2015-09-10 | 53 | -190/+190 | ||
| |