11a630f123
easier done with a goto instead of closing in each error.
2009-05-02 16:19:36 +00:00
0b783346d2
PR/41332: Jason V. Miller: paxctl(8) leaks file descriptors
...
Always close(fd) before returning.
Thanks for the report!
2009-05-02 06:01:30 +00:00
d877c4c3c0
Enable WARNS=4 by default, except for:
...
cpuctl dumplfs hprop ipf iprop-log kadmin kcm kdc kdigest
kimpersonate kstash ktutil makefs ndbootd ntp pppd quot
racoon racoonctl rtadvd sntp sup tcpdchk tcpdmatch tcpdump
traceroute traceroute6 user veriexecgen wsmoused zic
(Mostly third-party applications)
2009-04-22 15:23:01 +00:00
29f2e1ce01
fix -Wsign-compare issues
2009-01-18 10:01:34 +00:00
4c20e2ab03
try to handle different byte orders.
2008-08-11 10:58:02 +00:00
c61569c8b3
Add Christos to the AUTHORS section.
2008-02-11 18:05:58 +00:00
bdcc6c320e
There's no use for the '-l' flag, so don't document it. Viewing PaX flags
...
is done by issuing "paxctl file" with no flags, so note that it the
man-page instead.
From Michal Spacek, thanks!
2008-02-11 18:03:14 +00:00
7b06b28ff8
Document ASLR
2007-12-26 22:17:02 +00:00
4e65b015fb
Allow turning ASLR on and off.
2007-12-26 22:16:31 +00:00
3278973321
Fix typos:
...
- Mprotect -> MPROTECT
- Servguard -> Segvguard
While here, pad values.
2007-12-24 20:05:24 +00:00
8b0f9554ff
convert __attribute__s to applicable cdefs.h macros
2007-12-15 19:44:37 +00:00
f84222f6f6
fix usage to say we can take multiple files.
2007-12-11 01:40:27 +00:00
f8082d9a50
We should be able to operate on more than one file, like other unix tools.
2007-12-08 19:56:54 +00:00
e34be9798b
Never use "utilize". It means exactly the same thing as "use", but it
...
is longer and more cumbersome. It can always be replaced with "use"
without any change in meaning.
2007-08-20 16:07:05 +00:00
2ffe4b875f
Use an elf note to handle pax arguments. This is a temporary solution to
...
avoid wasting OS flag bits. In the future we'll probably use fileassoc to
achieve this (once there is a way to make fileassoc persistent) or in the
shorter term libelf, so that we can add and remove the note on demand instead
of burning bits on each binary. Of course since this is a tool, this means
that we'll need to think about how to handle libelf...
2007-06-24 20:35:36 +00:00
b95973aaa7
Sort sections. Use Po/Pc to avoid weird Xr arguments.
2007-05-19 14:18:33 +00:00
90f5cb38b2
it is segvguard.
2007-03-04 22:25:00 +00:00
8668f1cbbe
Say that Servguard will use fileassoc in the future. From Elad.
2007-03-04 21:16:46 +00:00
4a0f293388
revert previouses
2007-02-08 05:54:25 +00:00
d1a83ca2d5
Add a comment indicating why this program is installed 0550, as suggested
...
by christos@. The comment reads:
# This program is set 0550 because, as security(8) states, it has
# the potential to deplete kernel memory, under certain conditions.
2007-02-08 02:59:51 +00:00
db9dbd11ac
Install paxctl(8) as 0550.
2007-02-08 02:25:44 +00:00
a8c0f0c72e
Move paxctl from usr.bin/paxctl to usr.sbin/paxctl, and make it an admin
...
tool (man-page moved from section 1 to section 8).
2007-01-30 19:40:07 +00:00
christos