elad
2fc1513987
The emulation for these should be "native", not "netbsd".
...
Noted by Ray Lai.
2005-10-26 21:17:23 +00:00
elad
d8a0e22d8a
Adjust comment. Noted by Rui Paulo.
2005-09-07 19:15:49 +00:00
elad
f777d75b5c
Catch up with 64 bit inode changes.
2005-09-07 19:04:57 +00:00
elad
e6a2d9e984
Simplify man-page a bit.
...
Patch from Patrick Welche.
2005-09-03 11:44:45 +00:00
elad
3752840791
Add a new keyword, ``topdir'', that grants access only if the file is
...
in a hierarchy below the specified path.
2005-08-24 19:09:03 +00:00
elad
3df38a6c89
Make inpath work like strstr again. :)
2005-08-10 21:53:01 +00:00
elad
9d164b22bc
Add comments.
2005-08-10 21:33:36 +00:00
elad
e4088913b5
Separate constructing the path to the policy away from systrace_addpolicy() and
...
into systrace_getpolicyfilename().
2005-08-10 18:19:21 +00:00
elad
4e11de6548
Further correct handling of `inpath'.
...
The path in the policy is not normalized, and shouldn't be. We accept
only an absolute path, possibly with one trailing slash. Make note of
that in the manpage.
2005-07-04 16:32:30 +00:00
elad
931e7a5f52
Make `inpath' work as expected. Closes PR 29677.
...
Reported by Christian Biere, based on usenet post by John Wong.
2005-07-01 17:12:41 +00:00
elad
1d53f8bfa8
Use strcmp() when comparing strings in systrace.
...
Reported by Christian Biere in PR29676.
2005-07-01 16:12:11 +00:00
elad
1b7133edad
From marius@openbsd:
...
Fix an issue when scripts are executed under systrace where the argv[0]
would be normalized, and hence break scripts that depend on how they were
called.
2005-06-27 17:11:20 +00:00
elad
8ebc2e9bee
From marius@openbsd:
...
Add an exec message so that whenever a set-uid/gid process executes a new
image which we may control, the exec does not go by unnoticed.
2005-06-26 19:58:29 +00:00
christos
6310b59691
sprinkle a little const, and now everything compiles with WARNS=3
2005-06-26 19:10:48 +00:00
elad
03d49eb07f
From provos, via OpenBSD:
...
Prevent dereferencing possibly freed pointer.
2005-06-25 21:48:11 +00:00
elad
5cd24996d5
From marius@openbsd: (PR 3140)
...
If a string considered a filename is too long, don't exit but just let the
syscall fail, it might not actually be a filename.
2005-06-25 18:51:03 +00:00
elad
b53ff10682
From rohee@openbsd:
...
Use strlcpy() instead of snprintf() where possible.
2005-06-25 18:47:42 +00:00
elad
ddb0410ecc
From deraadt@openbsd:
...
Wrap bind() to AF_UNIX with umask() to avoid race.
2005-06-25 18:41:30 +00:00
christos
671011e703
Simplify and fix the case where we have both known and unknown flags.
2005-06-25 14:37:33 +00:00
elad
8b57c1a70c
Add translation for mmap()'s prot values.
2005-06-25 12:53:32 +00:00
elad
cc0def8774
Add translation for mprotect()'s prot values.
2005-06-25 12:22:43 +00:00
elad
4d20624823
Improve readability. Order syscalls, add numbers where possible.
2005-06-25 12:17:57 +00:00
christos
250ff65369
Const poisoning.
2005-06-24 23:21:09 +00:00
he
0a5aea28f2
Initialize ipid in two functions to NULL, to appease -Wuninitialized.
...
Marked with XXXGCC for dreamcast (found while compiling for it).
Reviewed (in slightly different form) by lukem.
2005-06-07 09:00:18 +00:00
lukem
5166671bc3
appease gcc -Wuninitialized
2005-06-01 15:41:19 +00:00
provos
d6497b197c
provide translation for fcntl cmd names; requested by Nicolai Johannes
2005-05-07 15:11:02 +00:00
wiz
50175a3a4d
From jmc@openbsd:
...
-c option take names as well as numerical ids. checked w/ sturm@
diff from ray.
2005-04-23 10:56:54 +00:00
provos
d830f0d651
increase the maximum length of allowable system call names
2004-12-01 03:30:07 +00:00
dsl
238960af7e
Add (unsigned char) cast to ctype function
2004-10-29 19:51:36 +00:00
jdolecek
0e3af04f6a
use native syscallnames[] array for 'aout' and 'aoutm68k' "emulations" - it's
...
only used for syscall name <-> number translations, and the native array
is guaranteed to be superset of the former 'aout' and 'aoutm68k' arrays
this re-adds 'aoutm68k' support, and replaces change made in 1.14
g/c #include's which are no longer needed (including aout_syscalls.c), and
also add some comments for the emulations[] array
2004-09-12 11:05:43 +00:00
jdolecek
c2ce3ec2d5
constify
2004-09-12 09:25:59 +00:00
he
72ed8803cf
Remove references to aoutm68k_syscalls.c, following that file's removal.
2004-09-10 18:30:20 +00:00
provos
3afd9aba5f
the special filename "" does not receive translation and is going to fail.
...
previously, systrace would normalize it to $CWD/.; found by Nikolay Sturm
from OpenBSD.
2004-01-24 03:44:46 +00:00
kleink
e71a15405c
Avoid using structure initializers with struct timeval.
2004-01-21 22:50:56 +00:00
provos
80b9ef16f9
off-by-one; found by Nikolay Sturm from OpenBSD
2004-01-17 18:54:32 +00:00
jmmv
b635f565e7
Homogenize usage messages: make the 'usage' word all lowercase, as this seems
...
to be the most common practice in our tree.
2004-01-05 23:23:32 +00:00
wiz
6fc98bf82d
Add -C to usage.
2003-11-28 23:32:25 +00:00
wiz
7978aff203
Bump date for previous (hi niels!).
...
Sort options.
2003-11-28 23:32:02 +00:00
provos
61d0495091
support for cradle mode by marius at monkey.org; cradle mode allows the
...
systrace UI to be attached and re-attached, it also multiplexes across
systrace process so that one UI can function as central notification
2003-11-28 21:53:32 +00:00
provos
2244ab26a9
allow underscores in usernames
2003-11-18 05:28:05 +00:00
fvdl
84f47d78af
Don't initialize an integer field with NULL.
2003-10-21 02:11:21 +00:00
wiz
a3390acd07
Punctuation improvement from jmc@openbsd.
2003-09-07 15:58:58 +00:00
wiz
6c3a1a5dfb
Some small tweaks from jmc@openbsd:
...
- .Bk/.Ek for SYNOPSIS
- .Ev for environment variables
- fix bogus -offsets
2003-09-06 16:39:34 +00:00
cb
5f734a1850
fix a race condition between path resolution in userland
...
and the subsequent namei(): inform the kernel portion of
valid filenames and then disallow symlink lookups for
those filenames by means of a hook in namei().
with suggestions from provos@
also, add (currently unused) seqnr field to struct
systrace_replace, from provos@
2003-08-25 09:12:42 +00:00
itojun
e0e82d2080
typo
2003-08-20 01:28:44 +00:00
provos
ab6fc8a1fd
fixed contrived race condition during attachment; from marius@monkey.org
2003-08-02 14:45:08 +00:00
provos
037feaaf20
avoid warning due to name collision.
2003-08-02 14:34:35 +00:00
provos
2e1af85ab0
normalize CWD for cases where CWD has a symlink in it. should solve
...
problems where CWD policies would not match.
2003-08-02 14:31:10 +00:00
provos
08ab84f25d
introduce normalize filename function.
2003-08-02 14:29:33 +00:00
provos
43914d5f2f
change CWD handling. CWD is fixed to the CWD of the systrace process.
2003-08-02 14:24:30 +00:00