| Commit message (Expand) | Author | Age | Files | Lines |
* | When system calls indicate an error they return -1, not some arbitrary | deraadt | 2019-06-28 | 1 | -5/+5 |
* | support configuring BIOCSFILDROP with tcpdump. | dlg | 2019-03-18 | 1 | -4/+5 |
* | tcpdump(8) monitor process privdrop | brynet | 2018-11-17 | 1 | -30/+40 |
* | The 'recvfd' and 'inet' promises are no longer required by tcpdump(8) | brynet | 2018-11-09 | 1 | -2/+2 |
* | Hoist opening pf.os(5) fingerprints '-o' earlier so that it doesn't | brynet | 2018-11-08 | 1 | -93/+43 |
* | add unveil(2) to tcpdump(8) | mestre | 2018-09-28 | 1 | -2/+14 |
* | mestre and I can find no reason why the pledge has "unix". Disable | deraadt | 2018-08-08 | 1 | -2/+2 |
* | Whoops, remove extra include. | brynet | 2017-09-08 | 1 | -2/+1 |
* | fork+exec model for tcpdump(8); re-exec the privileged child after fork | brynet | 2017-09-08 | 1 | -25/+60 |
* | Don't support loading appletalk addresses from /etc/appletalk.names. | akfaew | 2017-06-14 | 1 | -3/+2 |
* | Split pledge "ioctl" into "tape" and "bpf", and allow SIOCGIFGROUP only | deraadt | 2017-01-23 | 1 | -2/+2 |
* | err() instead of errx(); noted by tim | deraadt | 2016-07-25 | 1 | -3/+2 |
* | Split the root vs not-root cases better with regards to chroot setup. | deraadt | 2016-07-24 | 1 | -9/+12 |
* | 2004 privsep caused "tcpdump -r" to became a priviledged operation because | deraadt | 2016-07-21 | 1 | -32/+20 |
* | Remove two sets of NULL-checks before free(). | mmcc | 2015-12-05 | 1 | -5/+3 |
* | Surround pledge call with blank lines. | mmcc | 2015-11-03 | 1 | -1/+3 |
* | Change all tame callers to namechange to pledge(2). | deraadt | 2015-10-09 | 1 | -3/+3 |
* | Move from tame "cmsg" to tame "sendfd" or "recvfd", depending on which | deraadt | 2015-10-06 | 1 | -2/+2 |
* | tcpdump is two-process privsep. | deraadt | 2015-10-03 | 1 | -1/+3 |
* | since stdlib.h is in scope, don't cast.... you know the drill. | deraadt | 2015-08-21 | 1 | -2/+2 |
* | Move the BIOCGSTATS ioctl operation done by the tcpdump process | deraadt | 2015-07-14 | 1 | -8/+39 |
* | tzfile.h is an internal header that should never have been installed. | millert | 2015-03-15 | 1 | -3/+2 |
* | Adjust <sys/param.h> comments regarding use of use of MSIZE, or | deraadt | 2015-01-20 | 1 | -4/+4 |
* | Replace <sys/param.h> with <limits.h> and other less dirty headers where | deraadt | 2015-01-16 | 1 | -3/+3 |
* | Revert r1.29. Now that the "C" locale is ASCII-only, this workaround | stsp | 2011-09-22 | 1 | -5/+1 |
* | Call setlocale() to avoid display glitches in UTF-8 locales. | stsp | 2011-04-03 | 1 | -1/+5 |
* | correcto in comment; from Amarendra Godbole | jmc | 2009-04-17 | 1 | -2/+2 |
* | add filtering on direction; ok mpf@ deraadt@ feedback jmc@ | djm | 2008-04-18 | 1 | -4/+5 |
* | typos; ok jmc@ | martynas | 2007-11-27 | 1 | -2/+2 |
* | Set signal handlers directly after the fork(2), so that we avoid | moritz | 2006-04-22 | 1 | -1/+13 |
* | Remove remaining stuff from state QUIT, adjust some comments | moritz | 2006-04-22 | 1 | -6/+4 |
* | Add comments to please lint. No code changes. OK deraadt | cloder | 2006-04-21 | 1 | -1/+4 |
* | Only allow root to run tcpdump. It's needed for the chroot security. | otto | 2005-09-23 | 1 | -30/+24 |
* | Call endpwent() _after_ we're done with the struct passwd fields. | otto | 2005-05-23 | 1 | -2/+2 |
* | correct comments and function namens to reflect new parent/child | moritz | 2005-05-22 | 1 | -45/+45 |
* | fix signal race in statistics output. ok cloder@ henning@ | moritz | 2005-05-22 | 1 | -42/+3 |
* | more setres[ug]id; ok deraadt@ | djm | 2005-05-03 | 1 | -25/+13 |
* | fix signal race by removing STATE_QUIT completely. | moritz | 2005-04-20 | 1 | -7/+8 |
* | do not forget to call endpwent(). ok moritz@ | otto | 2005-04-10 | 1 | -1/+2 |
* | reduce the set of allowed actions in the privileged part | moritz | 2005-04-10 | 1 | -4/+44 |
* | simplify state engine, the old one was very confusing and wrong too. | otto | 2005-03-26 | 1 | -22/+42 |
* | whitespace | moritz | 2005-03-25 | 1 | -5/+5 |
* | add support for multiple DLTs using the -L and -y options. | reyk | 2005-03-06 | 1 | -3/+5 |
* | no \n in errx(3) | henning | 2004-07-14 | 1 | -2/+2 |
* | Take better care of people down under living in X and a half hour | otto | 2004-06-09 | 1 | -7/+4 |
* | Naming consistency. From Alexander Guy. ok canacar@ | otto | 2004-05-15 | 1 | -9/+9 |
* | Silence getopt() in the priv process. ok canacar@ henning@ | otto | 2004-04-23 | 1 | -1/+2 |
* | In error message, use saved errno, not current errno. | avsm | 2004-04-08 | 1 | -2/+2 |
* | - dont send junk err in parent_open_dump() if filename is NULL | avsm | 2004-04-03 | 1 | -7/+8 |
* | Check return code of chdir() after chroot(); noted by Joris Vink, slight mod | otto | 2004-03-14 | 1 | -2/+3 |