summaryrefslogtreecommitdiffstats
path: root/usr.bin/ssh/sandbox-systrace.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* Reduce use of <sys/param.h> and transition to <limits.h> throughout.deraadt2015-01-201-2/+2
* ifdef SYS_sendsyslog so this will compile without patching on -stabledjm2014-07-171-2/+3
* Permit use of SYS_sendsyslog from inside the sandbox. Clock is ticking,deraadt2014-07-111-1/+2
* Now that we have a dedicated getentropy(2) system call formatthew2014-06-181-2/+8
* permit SYS_getentropyderaadt2014-06-131-1/+2
* replace most bzero with explicit_bzero, except a few that cna be memsettedu2014-01-311-2/+2
* allow shutdown(2) syscall in sandbox - it may be called by packet_close()djm2014-01-301-1/+2
* Use clock_gettime(CLOCK_MONOTONIC ...) for ssh timers so that things likedtucker2013-06-011-1/+2
* fix a during the load of the sandbox policies (child can still makemarkus2012-06-301-28/+27
* Add mquery to the list of allowed syscalls for "UsePrivilegeSeparationdtucker2012-06-261-1/+2
* fail open(2) with EPERM rather than SIGKILLing the whole process. libcdjm2011-07-291-34/+44
* rename sandbox.h => ssh-sandbox.h to make things easier for portabledjm2011-06-231-2/+2
* $OpenBSD$ makersdjm2011-06-221-0/+1
* introduce sandboxing of the pre-auth privsep child using systrace(4).djm2011-06-221-0/+181