Commit Graph

2364 Commits

Author SHA1 Message Date
elad
3752840791 Add a new keyword, ``topdir'', that grants access only if the file is
in a hierarchy below the specified path.
2005-08-24 19:09:03 +00:00
dsl
8c772bc707 Don't apply CDPATH if the the first component of the target is "." or "..".
Fixes PR/30973 and applies the principle of least surprise.
Update documentation to match (including date).
(matches behaviour of pdksh - if not it's documentation)
2005-08-20 21:07:42 +00:00
elad
76ed05e8b1 Add and document -N: When used with -p, it will not copy the file flags.
PR 13645.
2005-08-15 17:13:35 +00:00
elad
2d28a8933f Document -L correctly. PR #30430. 2005-08-13 15:59:28 +00:00
elad
3df38a6c89 Make inpath work like strstr again. :) 2005-08-10 21:53:01 +00:00
elad
9d164b22bc Add comments. 2005-08-10 21:33:36 +00:00
elad
e4088913b5 Separate constructing the path to the policy away from systrace_addpolicy() and
into systrace_getpolicyfilename().
2005-08-10 18:19:21 +00:00
peter
fa141339e0 More minor cleanup:
- remove unnecessary prototype for main()
- use symbolic exit code
- KNF & wrap a long line
2005-07-22 14:27:08 +00:00
hubertf
15bc25dc45 Minor code cleanup:
* remove unneeded cast
 * use err() instead of perror() + exit()
 * use symbolic exit code

Patch contributed by Liam J. Foy <liamfoy@sepulcrum.org> in private mail.
2005-07-22 11:06:24 +00:00
wiz
980a2652ee Aspell, fix an Xref, drop trailing whitespace. 2005-07-15 22:33:48 +00:00
christos
0df4f0ca31 Only do certain actions when we are trully interactive, not just when we
are connected to a tty:
	1. enable editor
	2. print directory on directory change.
	3. print job messages
2005-07-15 17:49:43 +00:00
christos
b0d51313b4 If we have a script and we are interactive, set interactive to 2. This
allows us to run scripts with -i without printing the prompt like the
other shells do.
2005-07-15 17:46:54 +00:00
christos
e996b4625d Allow trap to work on ignored signals when the shell is interactive. 2005-07-15 17:23:48 +00:00
christos
ab760d2891 make setsig() return sig_t 2005-07-11 02:37:31 +00:00
christos
3564ac65d4 Don't hard ignore signals that were ignored by our environment, because
when we try to set a trap on them it will not work. Also while I am here:
1. don't change the action status if the signal system call failed.
2. don't try to sigignore it if signal failed.
3. clear the signal mask in case our parent blocked it for us.
2005-07-11 02:37:05 +00:00
elad
4e11de6548 Further correct handling of `inpath'.
The path in the policy is not normalized, and shouldn't be. We accept
only an absolute path, possibly with one trailing slash. Make note of
that in the manpage.
2005-07-04 16:32:30 +00:00
elad
931e7a5f52 Make `inpath' work as expected. Closes PR 29677.
Reported by Christian Biere, based on usenet post by John Wong.
2005-07-01 17:12:41 +00:00
elad
1d53f8bfa8 Use strcmp() when comparing strings in systrace.
Reported by Christian Biere in PR29676.
2005-07-01 16:12:11 +00:00
christos
d7df71ba0e Don't compile in cpio usage, if we are SMALL. 2005-06-29 02:21:27 +00:00
elad
1b7133edad From marius@openbsd:
Fix an issue when scripts are executed under systrace where the argv[0]
would be normalized, and hence break scripts that depend on how they were
called.
2005-06-27 17:11:20 +00:00
christos
10a02919cc Add some more const so that this compiles again. 2005-06-27 00:46:04 +00:00
elad
8ebc2e9bee From marius@openbsd:
Add an exec message so that whenever a set-uid/gid process executes a new
image which we may control, the exec does not go by unnoticed.
2005-06-26 19:58:29 +00:00
christos
6310b59691 sprinkle a little const, and now everything compiles with WARNS=3 2005-06-26 19:10:48 +00:00
christos
a397ec1f77 warns=3
- remove param names from function decls
- sprinkle const
- rename shadowed variables
- XXX: there is a lot of fishy __UNCONST going on.
2005-06-26 19:09:00 +00:00
elad
03d49eb07f From provos, via OpenBSD:
Prevent dereferencing possibly freed pointer.
2005-06-25 21:48:11 +00:00
elad
5cd24996d5 From marius@openbsd: (PR 3140)
If a string considered a filename is too long, don't exit but just let the
syscall fail, it might not actually be a filename.
2005-06-25 18:51:03 +00:00
elad
b53ff10682 From rohee@openbsd:
Use strlcpy() instead of snprintf() where possible.
2005-06-25 18:47:42 +00:00
elad
ddb0410ecc From deraadt@openbsd:
Wrap bind() to AF_UNIX with umask() to avoid race.
2005-06-25 18:41:30 +00:00
christos
671011e703 Simplify and fix the case where we have both known and unknown flags. 2005-06-25 14:37:33 +00:00
elad
8b57c1a70c Add translation for mmap()'s prot values. 2005-06-25 12:53:32 +00:00
elad
cc0def8774 Add translation for mprotect()'s prot values. 2005-06-25 12:22:43 +00:00
elad
4d20624823 Improve readability. Order syscalls, add numbers where possible. 2005-06-25 12:17:57 +00:00
christos
250ff65369 Const poisoning. 2005-06-24 23:21:09 +00:00
christos
b61c2197f1 Revert part of the previous commit. We cannot fix the problem by not waiting.
The problem is that the subshell code is not doing redirections properly.
2005-06-23 23:05:29 +00:00
christos
306d33d145 Don't wait for a background job in a subshell when we are set to EV_EXIT.
While I am here, call forkshell() explicitly FORK_FOO flags instead of
depending in FORK_FG == 0 and FORK_BG == 1.
2005-06-22 23:32:45 +00:00
hira
f999ca1abd Sort options (description). 2005-06-17 14:40:47 +00:00
hira
a2ed3bbe80 - Add -h to usage.
- Use set/getprogname(3).
2005-06-17 14:36:16 +00:00
hira
dfa6df8e5a - Whitespace nit.
- Wrap long line.
2005-06-17 14:27:18 +00:00
he
0a5aea28f2 Initialize ipid in two functions to NULL, to appease -Wuninitialized.
Marked with XXXGCC for dreamcast (found while compiling for it).

Reviewed (in slightly different form) by lukem.
2005-06-07 09:00:18 +00:00
he
1d55d88929 Appease -Wuninitialized by initializing val and uval to 0.
Marked with XXXGCC for hpcarm (found while building for it).

Reviewed (in a slightly different form) by lukem.
2005-06-07 08:53:13 +00:00
chs
7bbdd188e1 appease gcc -Wuninitialized on hp700. 2005-06-05 19:08:28 +00:00
hubertf
2d4e6a01c0 the case of waitpid() returning an error was already tested, and errno
printed for that case. the tests for the return code don't have errno
set, so don't try to print it.

By Liam J. Foy <liamfoy sepulcrum.org>, posted to tech-userlevel@.
2005-06-03 13:55:04 +00:00
lukem
5166671bc3 appease gcc -Wuninitialized 2005-06-01 15:41:19 +00:00
lukem
50cde64b47 Mark temp_path volatile so that it won't get clobbered after longjmp.
(Also appeases gcc -Wuninitialized.)
2005-06-01 15:38:32 +00:00
lukem
cfdf050ef3 appease gcc -Wuninitialized 2005-06-01 15:30:33 +00:00
lukem
aab85a0fd4 appease gcc -Wuninitialized 2005-06-01 15:25:51 +00:00
lukem
5760da6393 appease gcc -Wuninitialized 2005-06-01 15:12:18 +00:00
wiz
6599ec1bca Bump date for -no-recursion. 2005-05-24 00:05:01 +00:00
wiz
24bf3d8ac3 Whitespace and punctuation fixes. 2005-05-24 00:03:52 +00:00
rillig
42627098be Fixed wrong use of the <ctype.h> functions by adding (unsigned char) casts. 2005-05-23 08:03:25 +00:00