openbsd-src/sbin/pflogd/ at master · jcs.org/openbsd-src

jcs.org / openbsd-src

jcs's openbsd hax

openbsd

openbsd-src / sbin / pflogd /

at master 6 files

Dynamically link these /sbin daemons: dhcpleased, mountd, nfsd, pflogd, resolvd, slaacd, unwind. The mitigation story is way better: syscalls are in a randomly located libc, and every syscall stub is randomly located inside that due to random relinking. As opposed to fixed offset inside a release binary. There is one known consequence: /usr nfs mounting must use statically configured IP addresses. ok kettenis florian, others

3 years ago

mop up for the pcap.3 rename; help/ok deraadt

6 years ago

Fix copy pasto, re-add missing goto in error path.

6 years ago

Rework pflogd(8)'s fork+exec model; re-exec the unpriv child, not the privileged parent.

8 years ago

Change the error reporting pattern throughout the tree when unveil fails to report the path that the failure occured on. Suggested by deraadt@ after some tech discussion.

4 years ago

privsep_fdpass.c

Nuke some obvious #include duplications.

11 years ago