 soredake
|
c49cc24869
links update
|
8 years ago |
 Caleb James DeLisle
|
507858de3b
Fix small changes which were suggested in pull req #829
|
9 years ago |
 Stuart D. Gathman
|
f40f0b8167
Fix style issues. Report errno from setgid for diagnostics, properly
|
9 years ago |
 Stuart D. Gathman
|
f4e2d9ee70
save gid in getUser and use to setgid in setUser
|
9 years ago |
 Isidoro Ghezzi
|
df32d07308
removed unused const variable
|
9 years ago |
|
Caleb James DeLisle
|
b7366963c1
more cleanup
|
9 years ago |
|
Caleb James DeLisle
|
147bb4c3c1
Fixed the system to work with the new dropPermissions
|
9 years ago |
|
Caleb James DeLisle
|
b8e1e3e0b9
wip
|
9 years ago |
|
Caleb James DeLisle
|
6a8ee5cbf6
Avoid relying on signed integer overflow
|
10 years ago |
 kpcyrd
|
9510ab73c6
MAP_ANON for openbsd
|
10 years ago |
|
Caleb James DeLisle
|
da714a4a66
Cleaned up the way memory is mapped in apple.
|
10 years ago |
 wfleurant
|
49a116a539
Fixes #594 MacOSX memory mapping
|
10 years ago |
 Kyle Billings
|
41f65b8d8f
Fix mismatched formating in Security.c
|
10 years ago |
 Simon Janes
|
1cb6a13df7
memlimit checking via RLIM_INFINITY or overflow
|
10 years ago |
 Vadim Ippolitov
|
23d047964f
Fix memory limit checking under Linux (found in SeattleMeshnet/meshbox#6)
|
10 years ago |
|
Vadim Ippolitov
|
c765201af0
ifdef added
|
10 years ago |
|
Vadim Ippolitov
|
06c8e12425
Proper memory limit checking on FreeBSD. Fixes #521.
|
10 years ago |
 Caleb James DeLisle
|
3005cac83c
Removed some old string.h portability stuff and replaced it with CString.h which is easier portability, also made TUNInterface and NetPlatform fully non-portable since they are not intended to be portable and portability code changes from time to time, putting them at risk since they are not often compiled.
|
10 years ago |
|
Caleb James DeLisle
|
e24f3c501a
Jettisoned libseccomp which was not providing much cross-platform benefit
|
10 years ago |
|
Caleb James DeLisle
|
d88b3d0c94
Attempt to fix MAP_ANONYMOUS on apple
|
10 years ago |
|
Caleb James DeLisle
|
bb071adc04
%zu for size_t, thanks gentusk
|
10 years ago |
|
Caleb James DeLisle
|
72472817c6
allow more address space because it far exceeds actual memory usage and allow rt_sigprocmask to unblock signals
|
10 years ago |
|
Caleb James DeLisle
|
c48e305449
Added SECCOMP sandboxing and new admin API call to check if permissions are properly dropped.
|
10 years ago |
|
Caleb James DeLisle
|
e74dc2eef2
Don't infiniloop if nodejs is unavailable and do close your comments because it helps things
|
11 years ago |
|
Caleb James DeLisle
|
85b00bb461
Hardened the sandboxing with double checking and made nofiles mandatory
|
11 years ago |
|
Caleb James DeLisle
|
e64f8eaafb
Removed the little-used exception codes
|
11 years ago |
|
Caleb James DeLisle
|
4a6a1e853f
Removed Errno.[ch], -2070 LoC
|
11 years ago |
 Caleb James DeLisle
|
5c25cfbbe0
Asynchronous pipe using libuv
|
11 years ago |
|
Caleb James DeLisle
|
8dd271a9a3
Decrease hop limit early to prevent router advertizement schenanigans.
|
12 years ago |
|
Caleb James DeLisle
|
6ad4812d9a
Changes to W32 pipe/process handling, trying to get it working.
|
12 years ago |
