summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/sandbox-systrace.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* systrace is dead. long live systrace.deraadt2016-05-071-205/+0
* re-order system calls in order of risk, ok i'll be honest, ordered thisderaadt2015-10-021-12/+19
* Permit kbind(2) use in the sandbox now, to ease testing of ld.so work using itguenther2015-07-271-1/+4
* add getpid to sandbox, reachable by grace_alarm_handlerdjm2015-06-291-1/+2
* getentropy() and sendsyslog() have been around long enough.deraadt2015-05-181-15/+6
* Reduce use of <sys/param.h> and transition to <limits.h> throughout.deraadt2015-01-201-2/+2
* ifdef SYS_sendsyslog so this will compile without patching on -stabledjm2014-07-171-2/+3
* Permit use of SYS_sendsyslog from inside the sandbox. Clock is ticking,deraadt2014-07-111-1/+2
* Now that we have a dedicated getentropy(2) system call formatthew2014-06-181-2/+8
* permit SYS_getentropyderaadt2014-06-131-1/+2
* replace most bzero with explicit_bzero, except a few that cna be memsettedu2014-01-311-2/+2
* allow shutdown(2) syscall in sandbox - it may be called by packet_close()djm2014-01-301-1/+2
* Use clock_gettime(CLOCK_MONOTONIC ...) for ssh timers so that things likedtucker2013-06-011-1/+2
* fix a during the load of the sandbox policies (child can still makemarkus2012-06-301-28/+27
* Add mquery to the list of allowed syscalls for "UsePrivilegeSeparationdtucker2012-06-261-1/+2
* fail open(2) with EPERM rather than SIGKILLing the whole process. libcdjm2011-07-291-34/+44
* rename sandbox.h => ssh-sandbox.h to make things easier for portabledjm2011-06-231-2/+2
* $OpenBSD$ makersdjm2011-06-221-0/+1
* introduce sandboxing of the pre-auth privsep child using systrace(4).djm2011-06-221-0/+181