diff options
| author | Damien Miller <djm@mindrot.org> | 2014-07-02 12:47:48 +1000 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2014-07-02 12:47:48 +1000 |
| commit | 84a89161a9629239b64171ef3e22ef6a3e462d51 (patch) | |
| tree | b2d4e810d05a4ee77db25e2989d88b660fa684d4 /ChangeLog | |
| parent | 51504ceec627c0ad57b9f75585c7b3d277f326be (diff) | |
- matthew@cvs.openbsd.org 2014/06/18 02:59:13
[sandbox-systrace.c]
Now that we have a dedicated getentropy(2) system call for
arc4random(3), we can disallow __sysctl(2) in OpenSSH's systrace
sandbox.
ok djm
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 7 |
1 files changed, 7 insertions, 0 deletions
| @@ -4,6 +4,13 @@ | |||
| 4 | [sandbox-systrace.c] | 4 | [sandbox-systrace.c] |
| 5 | permit SYS_getentropy | 5 | permit SYS_getentropy |
| 6 | from matthew | 6 | from matthew |
| 7 | - matthew@cvs.openbsd.org 2014/06/18 02:59:13 | ||
| 8 | [sandbox-systrace.c] | ||
| 9 | Now that we have a dedicated getentropy(2) system call for | ||
| 10 | arc4random(3), we can disallow __sysctl(2) in OpenSSH's systrace | ||
| 11 | sandbox. | ||
| 12 | |||
| 13 | ok djm | ||
| 7 | 14 | ||
| 8 | 20140618 | 15 | 20140618 |
| 9 | - (tim) [openssh/session.c] Work around to get chroot sftp working on UnixWare | 16 | - (tim) [openssh/session.c] Work around to get chroot sftp working on UnixWare |