Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | When system calls indicate an error they return -1, not some arbitrary | 2019-06-28 | 1 | -5/+5 | |
| | | | | | | value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future. | ||||
* | Use user_from_uid(3) if getlogin(2) fails, storing the uid as a | 2018-09-18 | 1 | -9/+5 | |
| | | | | string if there is no passwd entry. OK tb@ | ||||
* | Make write explicitly ASCII only by transforming UTF-8 characters and non-ASCII | 2016-02-05 | 1 | -15/+24 | |
| | | | | | | | | | | bytes to a single '?'. This prevents sending of potentially harmful bytes to terminals who don't support UTF-8. written with help from schwarze@ text suggestions by jmc@ OK schwarze@ and semarie@ | ||||
* | Fix write to other user's tty. The device has to be opened with | 2015-10-20 | 1 | -3/+10 | |
| | | | | | | O_WRONLY, but without O_CREAT. So freopen(3) has to be replaced with open(2) and dup2(2). from deraadt@ | ||||
* | Change all tame callers to namechange to pledge(2). | 2015-10-09 | 1 | -3/+3 | |
| | |||||
* | unfortunately tame "stdio" can only happen well after the sequence of: | 2015-10-06 | 1 | -1/+8 | |
| | | | | | | utmp parsing, tty opening, setresgid to drop privs. it only protects a basic io loop. discussed with doug | ||||
* | Since the dawn of time, this has contained freopen() for the tty path | 2015-10-05 | 1 | -2/+2 | |
| | | | | | | | | with mode "w", as root, since "w" implies O_CREAT. That will create the raw file in /dev if it does not yet exist (due to a lie in utmp). It should use "r+", to open it for for O_RDWR only. Oh man this reminds me of 1988, how old is this bug? ok doug | ||||
* | Replace <sys/param.h> with <limits.h> and other less dirty headers where | 2015-01-16 | 1 | -5/+5 | |
| | | | | | | | | | possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol) | ||||
* | remove casts to time_t * which are not needed | 2013-04-16 | 1 | -2/+2 | |
| | |||||
* | rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and | 2009-10-27 | 1 | -14/+1 | |
| | | | | | | | unmaintainable). these days, people use source. these id's do not provide any benefit, and do hurt the small install media (the 33,000 line diff is essentially mechanical) ok with the idea millert, ok dms | ||||
* | sync synopsis and usage. | 2008-07-06 | 1 | -3/+3 | |
| | |||||
* | if the utmp file is (mysteriously gone) do not assume that the user is | 2006-10-04 | 1 | -3/+3 | |
| | | | | on the specified tty; problem noted by ilja@suresec.org, ok various | ||||
* | make these use setres[ug]id for simple privilege dropping; | 2005-07-04 | 1 | -4/+6 | |
| | | | | ok deraadt@ millert@ moritz@ | ||||
* | add missing includes | 2003-07-10 | 1 | -2/+3 | |
| | | | | ok deraadt@ tedu@ | ||||
* | mostly ansi cleanup; pval ok | 2003-06-10 | 1 | -3/+3 | |
| | |||||
* | Remove the advertising clause in the UCB license which Berkeley | 2003-06-03 | 1 | -7/+3 | |
| | | | | rescinded 22 July 1999. Proofed by myself and Theo. | ||||
* | a few more strlcpy | 2003-03-13 | 1 | -8/+8 | |
| | |||||
* | do not use sys/types.h and sys/param.h together; andrushock@korovino.net | 2002-12-09 | 1 | -3/+2 | |
| | |||||
* | ansi, and revoke privs after opening the tty | 2002-08-04 | 1 | -22/+14 | |
| | |||||
* | use sizeof w/ defines; niklas@ millert@ ok. | 2002-02-21 | 1 | -4/+4 | |
| | |||||
* | Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically. | 2002-02-16 | 1 | -8/+8 | |
| | |||||
* | kill more registers | 2001-11-19 | 1 | -7/+7 | |
| | | | | millert@ ok | ||||
* | avoid stdio in signal handler | 2001-11-02 | 1 | -3/+3 | |
| | |||||
* | -Wall cleanup; ok millert@ | 2001-06-27 | 1 | -5/+8 | |
| | |||||
* | mark remaining signal races which are difficult to fix, and fix a few partially | 2001-01-19 | 1 | -7/+10 | |
| | |||||
* | vis() buf overflow | 1999-02-21 | 1 | -3/+3 | |
| | |||||
* | kill non-POSIX S_IWRITE | 1998-07-06 | 1 | -3/+3 | |
| | |||||
* | missed one change, pointed out by Alex Nash <nash@mcs.net> | 1996-10-26 | 1 | -3/+3 | |
| | |||||
* | kill sprintf, use paths.h | 1996-10-25 | 1 | -5/+6 | |
| | |||||
* | VIS_NOSLASH | 1996-08-26 | 1 | -3/+3 | |
| | |||||
* | vis this baby too | 1996-08-26 | 1 | -13/+10 | |
| | |||||
* | rcsid | 1996-06-26 | 1 | -1/+2 | |
| | |||||
* | handle meta characters; good security idea from freebsd | 1995-11-17 | 1 | -5/+10 | |
| | |||||
* | warn if my permissions are off; but still allow a write | 1995-10-23 | 1 | -1/+1 | |
| | |||||
* | initial import of NetBSD tree | 1995-10-18 | 1 | -0/+318 | |