| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
| |
extra check for a truncated cmsghdr needs to be done since the embeded
lenght may be longer than the supplied buffer (MSG_CTRUNC case).
OK deraadt@
|
|
|
|
| |
handler; ok guenther@
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This brings unveil into the tree, disabled by default - Currently
this will return EPERM on all attempts to use it until we are
fully certain it is ready for people to start using, but this
now allows for others to do more tweaking and experimentation.
Still needs to send the unveil's across forks and execs before
fully enabling.
Many thanks to robert@ and deraadt@ for extensive testing.
ok deraadt@
|
|
|
|
|
|
|
|
|
|
| |
pledge for a new execve image immediately upon start. Also introduces
"error" which makes violations return -1 ENOSYS instead of killing the
program ("error" may not be handed to a setuid/setgid program, which
may be missing/ignoring syscall return values and would continue with
inconsistant state)
Discussion with many
florian has used this to improve the strictness of a daemon
|
|
|
|
| |
ok deraadt@
|
|
|
|
| |
ok deraadt@
|
|
|
|
| |
ok guenther
|
|
|
|
|
|
| |
this is usually a result of a timestamp which hasn't been identified as
"relative" and decoding them to precise dates long in the past is a
distraction. (eagerly awaiting a cleaner, better diff to do the same.)
|
|
|
|
|
|
|
| |
kdump can't do that for a sigaction sa_handler pointer from the trace,
so cast to void* to suppress it.
ok deraadt@
|
|
|
|
|
|
|
|
|
| |
VIS_CSTYLE | VIS_DQ | VIS_TAB | VIS_NL; add the latter three flags
to the existing vis encoding of exec argv/environ and pledge
requests/paths.
Delete local variables left unused when showbuf() and showbufc() were split
ok otto@ millert@
|
|
|
|
| |
stricter (per POSIX, dang it)
|
|
|
|
|
|
|
|
|
|
| |
define names. Use the mksubr infrastructure for EVFILT_*,
EV_*, and (with some kludging) NOTE_* values. If EV_ERROR is set,
include the errno string for the data member.
Also, do MSG_* parsing on the msg_flags member of struct msghdr.
ok millert@
|
| |
|
| |
|
|
|
|
| |
ok millert@
|
| |
|
|
|
|
| |
"every tool helps" deraadt@
|
|
|
|
|
|
|
| |
sendmsg(), and recvmsg(). For cmsghdr, the len, level, and type are always
shown, and for SOL_SOCKET,SCM_RIGHTS the fd numbers being passed are shown.
ok millert@ deraadt@
|
|
|
|
|
| |
Avoids a crash in strftime() found with the afl fuzzer.
ok guenther@
|
|
|
|
|
|
|
| |
and ctime presentation, but combined with the numeric form ala 0<"root">.
Do username and groupname presentation on syscall arguments and retvals.
ok millert@ otto@
|
|
|
|
| |
ok guenther@ deraadt@
|
|
|
|
| |
ok millert@
|
| |
|
|
|
|
|
|
|
| |
handling. E.g., a timeval of { -1, 1 } is -0.999999, as the subsecond
part is always positive.
Also, update the list of sockaddr_* types that we might add support for
|
|
|
|
|
|
|
|
| |
and runtime to the process totals. Also, add ktracing of struct
rusage in wait4() and getrusage().
problem pointed out by tedu@
ok deraadt@
|
|
|
|
| |
ok otto@
|
|
Reduce the #includes to take advantage of that.
ok millert@ otto@
|