3752840791
Add a new keyword, ``topdir'', that grants access only if the file is
...
in a hierarchy below the specified path.
2005-08-24 19:09:03 +00:00
8c772bc707
Don't apply CDPATH if the the first component of the target is "." or "..".
...
Fixes PR/30973 and applies the principle of least surprise.
Update documentation to match (including date).
(matches behaviour of pdksh - if not it's documentation)
2005-08-20 21:07:42 +00:00
76ed05e8b1
Add and document -N: When used with -p, it will not copy the file flags.
...
PR 13645.
2005-08-15 17:13:35 +00:00
2d28a8933f
Document -L correctly. PR #30430 .
2005-08-13 15:59:28 +00:00
3df38a6c89
Make inpath work like strstr again. :)
2005-08-10 21:53:01 +00:00
9d164b22bc
Add comments.
2005-08-10 21:33:36 +00:00
e4088913b5
Separate constructing the path to the policy away from systrace_addpolicy() and
...
into systrace_getpolicyfilename().
2005-08-10 18:19:21 +00:00
fa141339e0
More minor cleanup:
...
- remove unnecessary prototype for main()
- use symbolic exit code
- KNF & wrap a long line
2005-07-22 14:27:08 +00:00
15bc25dc45
Minor code cleanup:
...
* remove unneeded cast
* use err() instead of perror() + exit()
* use symbolic exit code
Patch contributed by Liam J. Foy <liamfoy@sepulcrum.org> in private mail.
2005-07-22 11:06:24 +00:00
980a2652ee
Aspell, fix an Xref, drop trailing whitespace.
2005-07-15 22:33:48 +00:00
0df4f0ca31
Only do certain actions when we are trully interactive, not just when we
...
are connected to a tty:
1. enable editor
2. print directory on directory change.
3. print job messages
2005-07-15 17:49:43 +00:00
b0d51313b4
If we have a script and we are interactive, set interactive to 2. This
...
allows us to run scripts with -i without printing the prompt like the
other shells do.
2005-07-15 17:46:54 +00:00
e996b4625d
Allow trap to work on ignored signals when the shell is interactive.
2005-07-15 17:23:48 +00:00
ab760d2891
make setsig() return sig_t
2005-07-11 02:37:31 +00:00
3564ac65d4
Don't hard ignore signals that were ignored by our environment, because
...
when we try to set a trap on them it will not work. Also while I am here:
1. don't change the action status if the signal system call failed.
2. don't try to sigignore it if signal failed.
3. clear the signal mask in case our parent blocked it for us.
2005-07-11 02:37:05 +00:00
4e11de6548
Further correct handling of `inpath'.
...
The path in the policy is not normalized, and shouldn't be. We accept
only an absolute path, possibly with one trailing slash. Make note of
that in the manpage.
2005-07-04 16:32:30 +00:00
931e7a5f52
Make `inpath' work as expected. Closes PR 29677.
...
Reported by Christian Biere, based on usenet post by John Wong.
2005-07-01 17:12:41 +00:00
1d53f8bfa8
Use strcmp() when comparing strings in systrace.
...
Reported by Christian Biere in PR29676.
2005-07-01 16:12:11 +00:00
d7df71ba0e
Don't compile in cpio usage, if we are SMALL.
2005-06-29 02:21:27 +00:00
1b7133edad
From marius@openbsd:
...
Fix an issue when scripts are executed under systrace where the argv[0]
would be normalized, and hence break scripts that depend on how they were
called.
2005-06-27 17:11:20 +00:00
10a02919cc
Add some more const so that this compiles again.
2005-06-27 00:46:04 +00:00
8ebc2e9bee
From marius@openbsd:
...
Add an exec message so that whenever a set-uid/gid process executes a new
image which we may control, the exec does not go by unnoticed.
2005-06-26 19:58:29 +00:00
6310b59691
sprinkle a little const, and now everything compiles with WARNS=3
2005-06-26 19:10:48 +00:00
a397ec1f77
warns=3
...
- remove param names from function decls
- sprinkle const
- rename shadowed variables
- XXX: there is a lot of fishy __UNCONST going on.
2005-06-26 19:09:00 +00:00
03d49eb07f
From provos, via OpenBSD:
...
Prevent dereferencing possibly freed pointer.
2005-06-25 21:48:11 +00:00
5cd24996d5
From marius@openbsd: (PR 3140)
...
If a string considered a filename is too long, don't exit but just let the
syscall fail, it might not actually be a filename.
2005-06-25 18:51:03 +00:00
b53ff10682
From rohee@openbsd:
...
Use strlcpy() instead of snprintf() where possible.
2005-06-25 18:47:42 +00:00
ddb0410ecc
From deraadt@openbsd:
...
Wrap bind() to AF_UNIX with umask() to avoid race.
2005-06-25 18:41:30 +00:00
671011e703
Simplify and fix the case where we have both known and unknown flags.
2005-06-25 14:37:33 +00:00
8b57c1a70c
Add translation for mmap()'s prot values.
2005-06-25 12:53:32 +00:00
cc0def8774
Add translation for mprotect()'s prot values.
2005-06-25 12:22:43 +00:00
4d20624823
Improve readability. Order syscalls, add numbers where possible.
2005-06-25 12:17:57 +00:00
250ff65369
Const poisoning.
2005-06-24 23:21:09 +00:00
b61c2197f1
Revert part of the previous commit. We cannot fix the problem by not waiting.
...
The problem is that the subshell code is not doing redirections properly.
2005-06-23 23:05:29 +00:00
306d33d145
Don't wait for a background job in a subshell when we are set to EV_EXIT.
...
While I am here, call forkshell() explicitly FORK_FOO flags instead of
depending in FORK_FG == 0 and FORK_BG == 1.
2005-06-22 23:32:45 +00:00
f999ca1abd
Sort options (description).
2005-06-17 14:40:47 +00:00
a2ed3bbe80
- Add -h to usage.
...
- Use set/getprogname(3).
2005-06-17 14:36:16 +00:00
dfa6df8e5a
- Whitespace nit.
...
- Wrap long line.
2005-06-17 14:27:18 +00:00
0a5aea28f2
Initialize ipid in two functions to NULL, to appease -Wuninitialized.
...
Marked with XXXGCC for dreamcast (found while compiling for it).
Reviewed (in slightly different form) by lukem.
2005-06-07 09:00:18 +00:00
1d55d88929
Appease -Wuninitialized by initializing val and uval to 0.
...
Marked with XXXGCC for hpcarm (found while building for it).
Reviewed (in a slightly different form) by lukem.
2005-06-07 08:53:13 +00:00
7bbdd188e1
appease gcc -Wuninitialized on hp700.
2005-06-05 19:08:28 +00:00
2d4e6a01c0
the case of waitpid() returning an error was already tested, and errno
...
printed for that case. the tests for the return code don't have errno
set, so don't try to print it.
By Liam J. Foy <liamfoy sepulcrum.org>, posted to tech-userlevel@.
2005-06-03 13:55:04 +00:00
5166671bc3
appease gcc -Wuninitialized
2005-06-01 15:41:19 +00:00
50cde64b47
Mark temp_path volatile so that it won't get clobbered after longjmp.
...
(Also appeases gcc -Wuninitialized.)
2005-06-01 15:38:32 +00:00
cfdf050ef3
appease gcc -Wuninitialized
2005-06-01 15:30:33 +00:00
aab85a0fd4
appease gcc -Wuninitialized
2005-06-01 15:25:51 +00:00
5760da6393
appease gcc -Wuninitialized
2005-06-01 15:12:18 +00:00
6599ec1bca
Bump date for -no-recursion.
2005-05-24 00:05:01 +00:00
24bf3d8ac3
Whitespace and punctuation fixes.
2005-05-24 00:03:52 +00:00
42627098be
Fixed wrong use of the <ctype.h> functions by adding (unsigned char) casts.
2005-05-23 08:03:25 +00:00
elad