1
0
mirror of https://github.com/openbsd/src.git synced 2025-01-10 06:47:55 -08:00
Commit Graph

28 Commits

Author SHA1 Message Date
deraadt
fd5846a355 New accounting flag ABTCFI to indicate signal SIGILL + code ILL_BTCFI
has occurred in the process.
ok various people
2024-02-25 00:07:13 +00:00
deraadt
f4577f1a84 pinsyscall(SYS_execve) will soon go away, so the sys/acct.h bit AEXECVE
can also be remove.  Delete the code using it from the one program that
inspects it.
2024-01-19 14:25:03 +00:00
deraadt
088ad7e529 Report system call pinning violations. 2023-12-11 00:40:31 +00:00
deraadt
0a857551e1 for process kills due to execve from non-pinned syscall address, export
a new AEXECVE bit to acct(4), and print it in lastcomm(8)
ok bluhm
2023-02-21 14:31:07 +00:00
bluhm
dd06cfbcff Inform about system call memory write protection and stack mapping
violations in system accounting.  This will help to find missbehaving
programs and possible attacks.  The flags bit field is full, so
recycle the PDP-11 compatibility on VAX.  lastcomm(1) prints the
AMAP flag as 'M'.  daily(8) prints a list of affected processes.
OK deraadt@
2019-09-09 20:02:26 +00:00
deraadt
d4db6826f2 No specific called "exec(3)", so move primary manpage to a name which
does exist -- execv(3).  Still call this a family but without "Nm".
Adjust Xr in various pages to refer to the precise function used
rather than the family, in most cases the semantics of execve(2) are
being referenced, so change the Xr.
ok jmc
2019-08-11 15:48:08 +00:00
millert
d89de9161f Replace cross-references to sigvec(3) with sigaction(2).
OK guenther@
2019-07-26 12:08:18 +00:00
deraadt
56025107dc convert flag listing into a .Bl 2019-07-25 19:05:22 +00:00
bluhm
227c47e95c Show unveil(2) violators in lastcomm(1) output and daily mail.
input Janne Johansson, schwarze@; OK deraadt@ millert@
2019-07-25 13:13:53 +00:00
mpi
763163dc4e Stop mentionning/testing the for the ASU bit (S flag).
It is of no use since suser() no longer set this bit.

ok millert@, bluhm@
2018-02-27 07:58:29 +00:00
bluhm
8788635fa4 ASLR, W^X, and guard pages trigger processor traps that result in
SIGILL, SIGBUS, SIGSEGV signals.  Make such memory violations visible
in lastcomm(1).  This also works if a programm tries to hide them
with a signal handler.  Manual kill -SEGV does not generate false
positives.
OK deraadt@
2017-06-08 17:14:02 +00:00
bluhm
696e057396 Add an acct(5) flag for pledge violations. Then lastcomm(1) shows
when something went wrong.  This allows to monitor whether the
system is under attack and that the attack has been prevented by
OpenBSD pledge(2).
OK deraadt@ millert@ jmc@
2017-06-07 20:53:59 +00:00
jmc
9490d37cb6 convert to new .Dd format; 2007-05-31 19:19:00 +00:00
jmc
2aeff9fb4d - section reorder
- COMPATIBILITY merge
- macro cleanup
- kill whitespace at EOL
- new sentence, new line

ssh pages ok markus@
2003-06-10 09:12:09 +00:00
millert
f75387cb26 Remove the advertising clause in the UCB license which Berkeley
rescinded 22 July 1999.  Proofed by myself and Theo.
2003-06-03 02:56:05 +00:00
aaron
f1ba34738e Change all option list specifications to ".Bl -tag -width Ds". Most man
pages just needed their -width parameter tweaked to "Ds", which provides
a nice width of 6 constant characters. For consistency more than anything.
2000-11-09 17:51:53 +00:00
aaron
2e3943820e Various cleanups and improvements. 2000-03-08 03:11:27 +00:00
aaron
2e0eb34f9e - remove trailing white space
- remove arguments from .Os macros
- remove arguments from .Nm macros, where appropriate
- some more Dq/Sq/Ql insanity
- still lots to do in the usr.bin tree... :/
1999-06-05 01:21:16 +00:00
alex
350bb3b813 Cleanup xrefs under SEE ALSO. Specifically:
- Sort xrefs by section, and then alphabetically.
  - Add missing commas between xref items.
  - Remove commas from the last xref entry.
  - Remove duplicate entries.
1999-05-16 19:54:36 +00:00
aaron
bd2318b988 remove redundant .Pp macros 1998-11-11 23:01:42 +00:00
aaron
aea1524a59 usr.bin/ man page fixes, f-m. 1998-09-26 19:54:41 +00:00
pjanzen
ee14b928da typo 1998-07-26 11:08:24 +00:00
espie
85637cae60 Man pages Xrefs. 1998-07-24 00:43:40 +00:00
deraadt
568c18542b xref accton 1997-05-30 00:10:34 +00:00
deraadt
1258a77d10 rcsid 1996-06-26 05:31:08 +00:00
deraadt
1ee9b17fd0 from netbsd; also print elapsed time 1995-12-14 02:56:43 +00:00
deraadt
2e3da15137 update from NetBSD 1995-10-28 04:43:09 +00:00
deraadt
df930be708 initial import of NetBSD tree 1995-10-18 08:37:01 +00:00