summaryrefslogtreecommitdiffstats
path: root/sys/kern/kern_pledge.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* In pledge "tty", allow TIOCSWINSZ. stty(1) is the obvious silly use.deraadt2015-10-111-1/+2
| | | | | | | The more important use will be tmux(1) and other active window size controlling programs. There seems little risk in exposing this small tty setting alongside the tcsetattr() family. ok millert
* __get_tcb() is needed for errno access in threaded programs on some archs.guenther2015-10-111-1/+2
| | | | | | Make it always available. ok deraadt@
* For pledge, sigsuspend() should is affecting the behaviour a process itself,deraadt2015-10-101-2/+2
| | | | | so we should allow it for 'self'. ok djm
* shuffle #ifdef TIOCSTI block to avoid a future /*FALLTHROUGH*/ mistake.deraadt2015-10-101-3/+6
|
* allow sysctl of kern.clockratederaadt2015-10-101-1/+4
|
* I forgot execve would go through the namei codepath, so a program markedderaadt2015-10-101-1/+6
| | | | | | "stdio rpath" this would fail to execve. pre-indicate exec actions to the namei checker to allow them through. ok semarie
* Allow kill(self, sig) in pledge SELF also. the stack protector, abort(),deraadt2015-10-091-2/+2
| | | | | and readpassphrase() in particular use this. ok millert tedu semarie
* Have not come up with a great pattern for flock() yet. flock() is permittedderaadt2015-10-091-2/+3
| | | | | | | | | | | | by "getpw" because libc getpw*/getgr* use open() of /var/run/ypbind.lock plus flock() to detect YP running. The kernel observes this dance to "open up" the YP door (ugliness should drive us to rewrite this mechanism from SunOS later). however, flock is also used independently. Current users are htpasswd mail skeyinit tmux authpf pwd_mkdb ldapd smtpd ypbind login_token mail.local lockspool Let's enable flock() for "cpath", and see if that helps these programs, otherwise we'll try "wpath" next.
* shortcircuit TIOCGETA to directly return ENOTTY for non-ttys. It couldderaadt2015-10-091-1/+7
| | | | | be called against a non-tty fd, so as to test "is this a tty". Discovered by sthen and rob pierce at the same time.
* stardate 93370.16: a whitespace appears to have entered our quadrant...deraadt2015-10-091-2/+2
|
* multicast test backwards; noted by renatoderaadt2015-10-091-3/+3
|
* Rename tame() to pledge(). This fairly interface has evolved to be morederaadt2015-10-091-0/+1241
strict than anticipated. It allows a programmer to pledge/promise/covenant that their program will operate within an easily defined subset of the Unix environment, or it pays the price.
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.