Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | unbreak | 2003-03-28 | 1 | -2/+1 | ||
| | | | | | | STRIOCCLONE and SYSTR_CLONE have the same value now ok mickey@ | |||||
* | Fix a crash in the systrace found by form@ | 2003-02-20 | 1 | -55/+57 | ||
| | | | | | | | One is a kernel fix that changes the lockin and one is a userland fix that prevents dereferencing a freed pointer. From provos deraadt@ ok | |||||
* | statement after label. | 2002-12-12 | 1 | -1/+2 | ||
| | ||||||
* | rename the clone ioctl to avoid clashing w/ the sockio; provos@ ok | 2002-12-04 | 1 | -1/+2 | ||
| | ||||||
* | Be more careful with illegal syscall numbers. | 2002-11-10 | 1 | -1/+6 | ||
| | ||||||
* | add id tags. | 2002-10-25 | 1 | -0/+1 | ||
| | ||||||
* | support for privilege elevation. | 2002-10-16 | 1 | -56/+152 | ||
| | | | | | | | | | | | with privilege elevation no suid or sgid binaries are necessary any longer. Applications can be executed completely unprivileged. Systrace raises the privileges for a single system call depending on the configured policy. Idea from discussions with Perry Metzger, Dug Song and Marcus Watts. from provos | |||||
* | new message to track uid/gid changes | 2002-10-09 | 1 | -0/+32 | ||
| | | | | from provos | |||||
* | cast size_t to u_long on printing. from netbsd | 2002-08-28 | 1 | -4/+4 | ||
| | ||||||
* | return EBUSY in processready | 2002-08-07 | 1 | -2/+2 | ||
| | ||||||
* | minor KNF. pid_t is unsigned. | 2002-07-30 | 1 | -6/+6 | ||
| | ||||||
* | whitespace at EOL | 2002-07-30 | 1 | -10/+10 | ||
| | ||||||
* | better uid/gid tracking; okay deraadt@ | 2002-07-24 | 1 | -5/+18 | ||
| | ||||||
* | prevent double free in some error conditions; from xs@kittenz.org | 2002-07-23 | 1 | -1/+3 | ||
| | ||||||
* | add seqnr to message from kernel, userland needs to quote correct seqnr. | 2002-07-22 | 1 | -0/+9 | ||
| | | | | avoids problems where tsleep has been interrupted by a signal. | |||||
* | two more missing systrace_lock | 2002-07-21 | 1 | -0/+4 | ||
| | ||||||
* | need systrace_lock/unlock around lockmgr lock operation. provos ok | 2002-07-21 | 1 | -0/+2 | ||
| | ||||||
* | comment clarification. niels ok | 2002-07-20 | 1 | -1/+2 | ||
| | ||||||
* | minor KNF | 2002-07-19 | 1 | -1/+1 | ||
| | ||||||
* | whitespace | 2002-07-19 | 1 | -7/+7 | ||
| | ||||||
* | tabify | 2002-07-19 | 1 | -7/+7 | ||
| | ||||||
* | do not call unlock when the lock is not locked; found by millert@ | 2002-07-13 | 1 | -27/+29 | ||
| | ||||||
* | in the error case, just remove an installed argument replacement, it is not | 2002-07-12 | 1 | -2/+6 | ||
| | | | | needed | |||||
* | system call argument rewriting framework via stackgap; okay art@ | 2002-06-21 | 1 | -12/+124 | ||
| | ||||||
* | more __FUNCTION__ slaughter | 2002-06-10 | 1 | -10/+10 | ||
| | ||||||
* | new ioctl that reports the current emulation a process uses; needed for | 2002-06-10 | 1 | -1/+15 | ||
| | | | | attaching to a running process | |||||
* | make fsystrace available in systrace.h; keep some more stats. | 2002-05-19 | 1 | -23/+3 | ||
| | ||||||
* | when detaching form a process don't forget to remove posted messages. | 2002-05-18 | 1 | -8/+12 | ||
| | ||||||
* | systrace facility, used to enforce and generate policies for system calls | 2002-05-16 | 1 | -0/+1249 | ||
okay deraadt@ |