7 Commits (c8e9f231bdeb045422d0c2cc05b5ea07b37dab5d)

Author	SHA1	Message	Date
Daniel Roethlisberger	f076336e0b	Don't allow -u on Mac OS X with pf proxyspecs ... Apple checks EUID==0 on ioctl(/dev/pf), whereas OpenBSD and FreeBSD only check permissions on open(/dev/pf). This means that on OS X, it is not possible to open /dev/pf, drop privileges, and send an ioctl to the file descriptor opened earlier with EUID==0. It also means Apple broke the Unix way of dealing with device nodes - why are there file permissions on /dev/pf when they later enforce EUID==0 on use, thereby breaking basic Unix mechanisms? Work around this by disallowing -u with pf proxyspecs and by not automatically dropping to nobody on Mac OS X. Issue: #65 Reported by: Vladimir Marteev	10 years ago
Daniel Roethlisberger	c3922d9852	Refactor process lookup out of NAT engine code ... Local process lookup is independent of the NAT engine used, it depends only on the operating system's process enumeration API. Moving the code out of NAT lookup also makes it work for static and SNI proxyspecs.	10 years ago
Landon Fuller	9204418c80	Thread pid lookup support through the NAT API. ... This exposes the pid lookup code as a standard attribute of NAT lookup -- if a matching process cannot be found, or if pid lookup isn't supported by the NAT backend, a pid of -1 is returned. This also adds the local_pid to the pxyconn context; this will be used to populate log strings.	10 years ago
Daniel Roethlisberger	ca923ee7f1	Update copyright notices to 2014	11 years ago
Daniel Roethlisberger	c972501063	Update copyright notices	12 years ago
Daniel Roethlisberger	439e8a8267	Use WUNRES and MALLOC attribs and fix sloppy code	13 years ago
Daniel Roethlisberger	4cfdef405a	Initial import of sslsplit-0.4.2	13 years ago