Poul-Henning Kamp cc7532aaf0 Add a sysctl variable which can help stop chroot(2) escapes. ... kern.chroot_allow_open_directories = 0 chroot(2) fails if there are open directories. kern.chroot_allow_open_directories = 1 (default) chroot(2) fails if there are open directories and the process is subject of a previous chroot(2). kern.chroot_allow_open_directories = anything else filedescriptors are not checked. (old behaviour). I'm very interested in reports about software which breaks when running with the default setting.		1999-03-23 14:26:40 +00:00
..
__error.c
_exit.2
accept.2	Update to reflect reality.	1998-11-16 03:49:39 +00:00
access.2
acct.2
adjtime.2
aio_read.2	Man page for aio_read(2).	1998-11-19 04:07:55 +00:00
bind.2
brk.2
chdir.2
chflags.2	EOPNOTSUPP also applies to fchflags().	1999-02-15 13:16:02 +00:00
chmod.2
chown.2
chroot.2	Add a sysctl variable which can help stop chroot(2) escapes.	1999-03-23 14:26:40 +00:00
clock_gettime.2
close.2
connect.2
dup.2
execve.2
fcntl.2	Document the errno return if the restrictions on the fcntl(F_SETOWN, ...)	1999-01-19 09:33:14 +00:00
flock.2
fork.2
fsync.2
ftruncate.c
getdirentries.2	Typo.	1998-10-30 23:50:48 +00:00
getdtablesize.2
getfh.2
getfsstat.2
getgid.2
getgroups.2	Backed out most of rev.1.4. I didn't submit it; I only submitted a	1999-03-05 10:29:34 +00:00
getitimer.2
getlogin.2
getpeername.2
getpgrp.2
getpid.2
getpriority.2
getrlimit.2
getrusage.2
getsid.2
getsockname.2
getsockopt.2
gettimeofday.2
getuid.2
intro.2	PID_MAX is now 99999.	1999-03-10 20:55:23 +00:00
ioctl.2	Add $Id$, remove quoting for `...'.	1998-09-09 01:30:25 +00:00
issetugid.2
kill.2
ktrace.2
link.2	Don't use undocumented markup "{}". Use 32767 instead of LINK_MAX to	1999-03-05 10:39:50 +00:00
listen.2	Typo: kern.somaxconn' -> kern.ipc.somaxconn'	1999-01-27 05:13:17 +00:00
lseek.2
lseek.c
madvise.2
Makefile.inc	Enable aio_read(2).	1998-11-24 08:15:08 +00:00
mincore.2
minherit.2	EACESS -> EACCES	1999-03-15 00:14:57 +00:00
mkdir.2
mkfifo.2
mknod.2
mlock.2
mmap.2	Mostly remove the VM_STACK OPTION.	1999-01-26 02:49:52 +00:00
mmap.c
mount.2	Fixed references to unmount(2) specified as umount.	1999-03-05 15:16:31 +00:00
mprotect.2
msync.2
munmap.2
nanosleep.2
nfssvc.2
open.2	Explain ENXIO error status with respect to fifos.	1999-03-07 18:45:35 +00:00
pathconf.2
pipe.2
poll.2
profil.2
ptrace.2
quotactl.2	Forgot to add $Id$ and change date in previous commit.	1999-03-05 09:44:59 +00:00
read.2
readlink.2
reboot.2
recv.2
rename.2	Commit out caveat about hardlinks to directories since they are	1998-12-13 23:35:01 +00:00
revoke.2	Backed out most of previous commit to go with backing out support for	1999-01-24 06:43:30 +00:00
rfork.2	Enable Linux threads support by default.	1999-01-26 02:38:12 +00:00
rmdir.2
rtprio.2
sched_get_priority_max.2	Sort cross references.	1998-08-31 16:41:09 +00:00
sched_setparam.2	Sort cross references.	1998-08-31 16:41:09 +00:00
sched_setscheduler.2	Sort cross references.	1998-08-31 16:41:09 +00:00
sched_yield.2
select.2	Describe what constitues an exceptional condition.	1998-08-24 01:09:34 +00:00
semctl.2	Use ellipsis in synopsis.	1998-09-12 01:27:34 +00:00
semget.2
semop.2
send.2
sendfile.2	Added info about non-blocking support.	1998-11-06 19:35:58 +00:00
setgroups.2
setpgid.2
setregid.2
setreuid.2
setsid.2
setuid.2
shmat.2
shmctl.2
shmget.2
shutdown.2	Document the fact that shutdown(2) is expected to comply with Posix.1g,	1998-09-12 21:38:30 +00:00
sigaction.2	Mention which system interface functions are signal-safe.	1998-09-09 20:44:51 +00:00
sigaltstack.2	Updated type of ss_size in struct sigaltstack.	1999-01-01 12:22:11 +00:00
sigpending.2
sigprocmask.2
sigreturn.2
sigstack.2
sigsuspend.2
socket.2
socketpair.2
stat.2	Fix types.	1998-10-21 09:48:35 +00:00
statfs.2
swapon.2
symlink.2	Removed occurrences of consecutive repeated words (such as "the the").	1999-02-12 02:12:08 +00:00
sync.2
sysarch.2	oops, forgot to do ``cvs add'' first.	1998-07-28 03:39:04 +00:00
syscall.2
truncate.2
truncate.c
umask.2
undelete.2
unlink.2
utimes.2
vfork.2	Don't mention exit(3) in explanation; _exit(2) is a better choice.	1998-11-23 03:23:14 +00:00
wait.2
write.2