summaryrefslogtreecommitdiffstats
path: root/src/privsep.c
Commit message (Expand)AuthorAge
* Rename Privileged Actioneer to Privileged ProxyRoy Marples2021-02-02
* Rename Master to ManagerRoy Marples2021-02-02
* eloop: Make the API more like native poll/kqueue/epollRoy Marples2021-02-02
* A belated welcome to 2021Roy Marples2021-01-31
* Linux: Implement epoll(7) for eloop (again)Roy Marples2021-01-28
* privsep: Restore the poll maxfd + 1 for state engineRoy Marples2021-01-28
* privsep: Don't add 1 to max fd open when limiting resourcesRoy Marples2021-01-28
* BSD: Implement kqueue(2) for eloop (again)Roy Marples2021-01-28
* privsep: move setting signals to after clearing eloopRoy Marples2021-01-27
* privsep: log sandbox when not daemonisingRoy Marples2020-12-26
* dhcpcd: Don't create launcher process if keeping in foregroundRoy Marples2020-11-11
* Add --noconfigure optionRoy Marples2020-11-04
* privsep: Send all log messages to the privileged actioneerRoy Marples2020-10-30
* privsep: Minor correction to prior logicRoy Marples2020-10-11
* privsep: We need to ensure stderr is valid before testing if ttyRoy Marples2020-10-10
* privsep: Fix stderr redirection againRoy Marples2020-10-10
* privsep: Only start network proxy if we need toRoy Marples2020-10-07
* privsep: Only log chrooting from the launcher processRoy Marples2020-10-07
* Don't log backticks.Roy Marples2020-10-03
* privsep: We need getsockopt as well as setsockopt on the link socketRoy Marples2020-10-03
* privsep: allow CAP_SETSOCKOPT for route(4) fd.Roy Marples2020-10-02
* privsep: Don't log sandbox type twiceRoy Marples2020-09-21
* privsep: sandbox the launcher processRoy Marples2020-09-20
* privsep: Don't be noisy about the sandboxRoy Marples2020-09-20
* privsep: Log if the platform sandbox is unavailable or availableRoy Marples2020-09-20
* privsep: Add the SECCOMP BPF sandbox for LinuxRoy Marples2020-09-19
* privsep: Fold capsicum and pledge entry points into ps_entersandboxRoy Marples2020-09-19
* dhcpcd: Only manipulate stdin, stdout and stderr when validRoy Marples2020-09-12
* privsep: dump leases in a sandboxRoy Marples2020-09-06
* privsep: Dump leases from stdin in a limited sandboxRoy Marples2020-09-06
* privsep: dropprivs can be staticRoy Marples2020-09-06
* privsep: limit rights for stdout/stderr/stdin using capsicumRoy Marples2020-09-06
* dhcpcd: Redirect stdout/stderr to the launcher stderr descriptorRoy Marples2020-09-06
* privsep: Fix prior for FreeBSD.Roy Marples2020-09-05
* privsep: Use xsocketpairRoy Marples2020-09-05
* privsep: Only the master process accepts signalsRoy Marples2020-08-20
* privsep: Improve some errorsRoy Marples2020-08-08
* privsep: Don't limit file writes if logging to a fileRoy Marples2020-07-01
* privsep: check return of freopen(3)Roy Marples2020-06-29
* privsep: don't abort if setrlimit failsRoy Marples2020-06-15
* privsep: Fix a shutdown raceRoy Marples2020-06-10
* privsep: RLIMIT_FSIZE works fine on pledge and capsicumRoy Marples2020-06-10
* privsep: Disable RLIMIT_FSIZE when using the logfile optionRoy Marples2020-06-10
* privsep: Apply resource limits to OpenBSD as well where we canRoy Marples2020-06-10
* privsep: Apply what resource limits we can to capsicumRoy Marples2020-06-10
* privsep: control proxy is no longer optionalRoy Marples2020-06-10
* privsep: For Linux and Solaris, set RLIMIT_NOFILES to neventsRoy Marples2020-06-09
* privsep: Implement a resource limited sandboxRoy Marples2020-06-09
* privsep: Limit rights generically rather than Capsicum specifcRoy Marples2020-06-05
* Linux: make resource limits work by using getifaddrs over privsepRoy Marples2020-06-05
generated by cgit v1.2.3 (git 2.25.1) at 2021-03-13 22:13:11 +0000