Poul-Henning Kamp cc7532aaf0 Add a sysctl variable which can help stop chroot(2) escapes. ... kern.chroot_allow_open_directories = 0 chroot(2) fails if there are open directories. kern.chroot_allow_open_directories = 1 (default) chroot(2) fails if there are open directories and the process is subject of a previous chroot(2). kern.chroot_allow_open_directories = anything else filedescriptors are not checked. (old behaviour). I'm very interested in reports about software which breaks when running with the default setting.		1999-03-23 14:26:40 +00:00
..
alpha	[This is a null commit to supply the correct log entry]	1998-12-23 11:55:42 +00:00
amd64	Simplify implementation and eliminate a register preservation problem.	1998-09-18 05:50:52 +00:00
compat-43	Add missing period. We don't allow maternity leaves.	1998-07-29 05:13:39 +00:00
db	Replace memory leaking instances of realloc with non-leaking reallocf.	1998-09-16 04:17:47 +00:00
gen	Typo fix.	1999-03-23 05:01:11 +00:00
gmon	Change a test for NETBSD_SYSCALLS to __alpha__. We're not ready to	1998-09-05 07:57:43 +00:00
i386	EACESS -> EACCES	1999-03-15 00:14:57 +00:00
include	Implement compile time debug support for spinlocks.	1998-06-09 08:28:49 +00:00
locale	Fixed tab lossage in previous commit.	1999-02-25 11:27:52 +00:00
mips	Bring in initial libc support for mips. These files were taken from	1999-03-03 07:06:17 +00:00
mipseb	These were missing from the previous commit.	1999-03-03 07:08:03 +00:00
mipsel	These were missing from the previous commit.	1999-03-03 07:08:03 +00:00
net	Mention that getservbyport requires its port parameter to be in	1999-03-02 02:34:23 +00:00
nls	Provide meaningful errno value on error return	1998-07-14 18:27:43 +00:00
quad	- Fix modulo bug that was masked by the correct code in libgcc.a which is	1998-11-30 20:25:37 +00:00
regex	Replace memory leaking instances of realloc with non-leaking reallocf.	1998-09-16 04:17:47 +00:00
rpc	Document type for 'req' argument to clnt_control.	1999-01-31 16:13:25 +00:00
stdio	Add support for long long modifier (e.g. %llx, %lld).	1999-03-11 22:44:02 +00:00
stdlib	Correct synopsys: getsubopt is declared in unistd.h, not stdlib.h.	1999-03-02 02:35:57 +00:00
stdtime	Merge from vendor branch: timezone file structure changes and doco.	1999-01-21 17:22:59 +00:00
string	Corrected use of backslash escaping in sample code.	1999-02-27 00:54:40 +00:00
sys	Add a sysctl variable which can help stop chroot(2) escapes.	1999-03-23 14:26:40 +00:00
xdr	Add support for the RPC 64-bit integer type ``hyper''.	1998-09-08 17:33:12 +00:00
yp	Fixed the usual missing dependencies on headers generated by rpcgen.	1998-05-09 15:10:53 +00:00
Makefile	Change i386 in a few paths to ${MACHINE} to support MACHINE=pc98.	1998-09-09 11:22:28 +00:00
Makefile.inc	Define empty variables in case no names are added to them. This avoids	1998-03-09 06:21:41 +00:00