NetBSD

Author	SHA1	Message	Date
provos	931062ce16	translation for socket system call	2002-10-11 04:40:11 +00:00
provos	89afc325c0	predicates are part of the grammar now; in non-root case, predicates are evaluated only once; in root case, predicates and variable expansion are dynamic.	2002-10-08 14:49:23 +00:00
itojun	d584f0a0fc	support for templates. they allow fast generation of new policies. an appropriate template can be inserted during initial policy generation. from provos	2002-09-23 04:35:41 +00:00
itojun	b6aefbe19f	sync with latest systrace in openbsd tree. improved systrace with chroot.	2002-08-28 03:52:44 +00:00
itojun	71a4240254	aenable linux systrace only on platforms that support it. noted by hannken@eis.cs.tu-bs.de	2002-08-01 08:47:03 +00:00
itojun	4f0c9c76b6	sync up with latest openbsd systrace. - avoid race conditions by having seqno in ioctl - better uid/gid tracking - "replace" policy to replace args - less diffs, as many of local changes were fed back to openbsd already due to the 1st item, it was impossible for us to provide backward-compatibility (new kernel + old bin/systrace won't work). upgrade both.	2002-07-30 16:29:28 +00:00
christos	5039a9e5ee	Add userland portion of systrace.	2002-06-17 16:29:07 +00:00