20 Commits (a027fb68cd2b35b1982ef1d0ef75a028667eea9e)

Author	SHA1	Message	Date
Daniel Roethlisberger	91da4674e5	Update copyright, license and tagline ... - Update copyright to 2015 - Remove the non-standard "unmodified" from the 2-clause BSD license - Remove scalable from the tagline to avoid misinterpretations	10 years ago
Daniel Roethlisberger	e69b13f2eb	SIGUSR1 re-opens -l/-L log files; add defaults.h ... Issue: #52	10 years ago
Daniel Roethlisberger	0e0a465f5d	Fix build on OpenBSD by adding missing includes	10 years ago
Daniel Roethlisberger	c01ace1261	Introduce privilege separation architecture ... Fork into a monitor parent process and an actual proxy child process, communicating over AF_UNIX sockets. Certain privileged operations are performed through the privileged parent process, like opening log files or listener sockets, while all other operations happen in the child process, which can now drop its privileges without side-effects for log file opening and other privileged operations. This is also a preparation for -l/-L logfile reopening through SIGUSR1. This means that -S and -F are no longer relative to chroot() if used with -j. This is a deliberate POLA violation.	10 years ago
Daniel Roethlisberger	a027f87c1c	Check if -u and -m user and group exist immediately	10 years ago
Daniel Roethlisberger	a09f42a507	Handle EINTR in sys_sendmsgfd() and sys_recvmsgfd()	10 years ago
Daniel Roethlisberger	71743feaa1	Add functions to send/recv UNIX dgram socket msgs and fds	10 years ago
Daniel Roethlisberger	d1d6d295df	Fixing error-case memory leaks in uid/gid lookups	10 years ago
Daniel Roethlisberger	7b8ba7310d	Fix uid/gid lookup where sysconf(_SC_GETPW_R_SIZE_MAX) fails ... On some platforms, sysconf(_SC_GETPW_R_SIZE_MAX) compiles but never succeeds (e.g. FreeBSD 8.4). Fix this by dynamically enlarging an initially small buffer until it is large enough, and reuse the determined buffer size on subsequent calls to the same function.	10 years ago
Daniel Roethlisberger	fcd008df4b	Unify asprintf error handling	10 years ago
Daniel Roethlisberger	18c3e055e3	Refactor recursive mkdir() into sys_mkpath()	10 years ago
Daniel Roethlisberger	966fe80c0c	Move process information code from sys to proc	10 years ago
Daniel Roethlisberger	2cc353f274	Check malloc retval and mark ptr arguments non-null	10 years ago
Landon Fuller	5ed49c4985	Implement user and group name lookup.	10 years ago
Landon Fuller	52d979e29d	Add a standard API for fetching process name, uid, and gid.	10 years ago
Landon Fuller	9d54677009	Add support for specifying an explicit group when dropping privileges. ... This simplifies my use of pf(4) when using group-based rules to exclude splitssl from redirection.	10 years ago
Daniel Roethlisberger	ca923ee7f1	Update copyright notices to 2014	11 years ago
Daniel Roethlisberger	c972501063	Update copyright notices	11 years ago
Daniel Roethlisberger	92db084d25	Fix documentation of sys_sockaddr_parse()	12 years ago
Daniel Roethlisberger	4cfdef405a	Initial import of sslsplit-0.4.2	12 years ago