summaryrefslogtreecommitdiffstats
path: root/usr.sbin/vmd/proc.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* During the fork+exec implementation, daemon(3) was moved afterbluhm2018-09-101-5/+16
| | | | | | | proc_init(). As a consequence vmd(8) child processes did not detach from the terminal anymore. Dup /dev/null to the stdio file descriptors in the children. OK mlarkin@ reyk@
* Remove cpath pledge(2) promise. We decided that not deleting the unix controlmestre2018-08-051-4/+1
| | | | | | | sockets cause no harm and this way we close another attack surface by not allowing the daemon to create/delete any more files. OK florian@
* Remove a debug message that has outlived its usefulness.mlarkin2017-11-041-3/+1
| | | | From Carlos Cardenas, who discussed this with reyk@ also. Thanks!
* vmd: add more explanatory log_debug messagesmlarkin2017-09-081-1/+3
| | | | From Carlos Cardenas, many thanks!
* sync proc.c changes from relayd/httpdbenno2017-05-291-5/+5
|
* Nuke some whitespace that keeps poking me in the eye as I try tokrw2017-01-171-2/+2
| | | | steal code.
* Stop accessing verbose and debug variables from log.c directly.reyk2017-01-091-2/+2
| | | | | | | | This replaces log_verbose() and "extern int verbose" with the two functions log_setverbose() and log_getverbose(). Pointed out by benno@ OK krw@ eric@ gilles@ (OK gilles@ for the snmpd bits as well)
* Sync switchd(8) and vmd(8) with the latest proc.c changes. This syncrzalamena2016-11-161-6/+25
| | | | | | basically imports the imsg_flush() fix from reyk@ in httpd(8). ok reyk@
* Sync proc.c file vmd(8) and switchd(8).rzalamena2016-10-111-78/+90
| | | | | | | | | New changes: * Fix msgbuf_write() usage idiom; * Add context (function name) that fatal()ed; * Use less fds on startup; ok mlarkin@, reyk@
* Sync with httpd(8) proc file. Check for dup2() usage to avoid oldd == newdrzalamena2016-10-051-2/+8
| | | | | | and remove the CLOEXEC with fcntl() if necessary. ok reyk@
* Call setsid() to create a new session for the executed processes.reyk2016-10-051-1/+5
| | | | | From deraadt@ OK rzalamena@
* Add a new "priv" process that is responsible for ioctls and restrictedreyk2016-10-041-3/+9
| | | | | | | | | | | operations that aren't allowed under pledge. This is a companion to the "vmd" process that runs as root but with pledge. With the "priv" process, each new tap(4) interface now gets a description to indicate the vm, eg. "vm1-if0-myvm". For network configuration will be done by vmd/priv later. OK mlarkin@
* Implement fork+exec for vmd, using the same framework from httpd etc.reyk2016-09-291-187/+334
| | | | No objections from mlarkin@ sunil@
* Add imsg "peerid" to debug messages (only within -DDEBUG).reyk2015-12-071-5/+7
|
* Another imsg_read user I did miss in my EAGAIN rampage.claudio2015-12-051-2/+2
|
* Sync with relayd, fix previous use of proc_compose*_imsg()reyk2015-12-021-2/+16
|
* Add back the "peerid" to the proc_compose*() functions: in relayd, Ireyk2015-12-021-6/+6
| | | | | | initially left it out because I didn't have a need for it. But it is actually quite useful to carry a reference to the imsg data context across processes.
* Start tweaking vmd's privsep and daemon model by splitting the mainreyk2015-12-021-0/+632
process into multiple parts and adopting the "proc.c"-style from other daemons. This allows to further reduce the privileges, to give better pledge(2), and to add some upcoming changes. "please do" mlarkin@, deraadt@
Copyright © 1996 – 2023 Jason A. Donenfeld. All Rights Reverse Engineered.