Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
55,335 Commits 606 Branches 0 Tags 3.1 GiB
C 85.3%
Roff 7.2%
Assembly 3.1%
Shell 1.7%
Makefile 1.2%
Other 0.9%
5367f3400c
Go to file
jsm 5367f3400c Security improvements for games (largely from or inspired by OpenBSD). 
Games which run setgid from dm, but don't need to, should drop their
privileges at startup.

Games which have a scorefile should open it at startup, then drop all
privileges leaving just the open writable file descriptor.  If the
game can invoke subprocesses, this should be made close-on-exec.

Games with scorefiles should make sure they do not get a file
descriptor < 3.  (Otherwise, they could get confused and corrupt the
scorefile when using stdin, stdout or stderr.)

Some old setuid revokes from the days of setuid games change into gid
revokes.
1999-09-12 09:02:20 +00:00
bin the PMAP_NEW option is gone as the new interface is no longer optional. 1999-09-12 01:19:23 +00:00
distrib Tweak. 1999-09-10 07:43:00 +00:00
etc use sysctl -n to get numeric result, not awk. 1999-09-06 18:52:33 +00:00
games Security improvements for games (largely from or inspired by OpenBSD). 1999-09-12 09:02:20 +00:00
gnu Correct the condition codes. 1999-09-10 12:52:56 +00:00
include strlcat() and strlcpy() aren't ISO/IEC 9899:1990. 1999-09-09 09:30:40 +00:00
lib the PMAP_NEW option is gone as the new interface is no longer optional. 1999-09-12 01:19:23 +00:00
libexec the PMAP_NEW option is gone as the new interface is no longer optional. 1999-09-12 01:19:23 +00:00
regress Oops; remember to clean the output file. 1999-08-30 17:06:33 +00:00
sbin Use unixish term "hole" instead od "sparce" (which looks like it 1999-09-07 08:16:13 +00:00
share the PMAP_NEW option is gone as the new interface is no longer optional. 1999-09-12 01:19:23 +00:00
sys Add a flag in the request to determine if the data copying is done by the 1999-09-12 08:23:42 +00:00
usr.bin RTF_PROTO1 is indicated by the flag '1' and RTF_PROTO2 is indicated by the flag '2', 1999-09-12 02:33:43 +00:00
usr.sbin the PMAP_NEW option is gone as the new interface is no longer optional. 1999-09-12 01:19:23 +00:00
Makefile Remove all of the domestic/crypto-us glue from this file. It is handled 1999-07-12 21:53:52 +00:00