Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-09-10 | - (djm) [sandbox-seccomp-filter.c] Allow mremap and exit for DietLibc; | Damien Miller | |
patch from Felix von Leitner; ok dtucker | |||
2014-03-17 | - (djm) [sandbox-seccomp-filter.c] Soft-fail stat() syscalls. Add XXX to | Damien Miller | |
remind myself to add sandbox violation logging via the log socket. | |||
2014-02-06 | - (djm) [sandbox-seccomp-filter.c] Not all Linux architectures define | Damien Miller | |
__NR_shutdown; some go via the socketcall(2) multiplexer. | |||
2014-01-31 | - (djm) [sandbox-seccomp-filter.c sandbox-systrace.c] Allow shutdown(2) | Damien Miller | |
syscall from sandboxes; it may be called by packet_close. | |||
2014-01-17 | - (djm) [Makefile.in configure.ac sandbox-capsicum.c sandbox-darwin.c] | Damien Miller | |
[sandbox-null.c sandbox-rlimit.c sandbox-seccomp-filter.c] [sandbox-systrace.c ssh-sandbox.h sshd.c] Support preauth sandboxing using the Capsicum API introduced in FreeBSD 10. Patch by Dag-Erling Smorgrav, updated by Loganaden Velvindron @ AfriNIC; ok dtucker@ | |||
2013-06-02 | - (dtucker) [sandbox-seccomp-filter.c] Allow clock_gettimeofday. | Darren Tucker | |
2013-02-22 | - (djm) [configure.ac sandbox-seccomp-filter.c] Support for Linux | Damien Miller | |
seccomp-bpf sandbox on ARM. Patch from shawnlandden AT gmail.com; ok dtucker | |||
2012-07-06 | - (djm) [sandbox-seccomp-filter.c] fallback to rlimit if seccomp filter is | Damien Miller | |
not available. Allows use of sshd compiled on host with a filter-capable kernel on hosts that lack the support. bz#2011 ok dtucker@ | |||
2012-04-04 | - (djm) [Makefile.in configure.ac sandbox-seccomp-filter.c] Add sandbox | Damien Miller | |
mode for Linux's new seccomp filter; patch from Will Drewry; feedback and ok dtucker@ |