| /freebsd-14.2/contrib/mandoc/ |
| H A D | test-pledge.c | 6 return !!pledge("stdio", NULL); in main()
|
| H A D | main.c | 170 if (pledge("stdio rpath wpath cpath tmppath tty proc exec", NULL) == -1) { in main()
401 c = pledge("stdio rpath", NULL); in main()
404 c = pledge("stdio rpath wpath cpath", NULL); in main()
406 c = pledge("stdio rpath tmppath tty proc exec", NULL); in main()
934 pledge("stdio rpath cpath", NULL) == -1) { in process_onefile()
1384 if (pledge("stdio rpath tmppath tty proc", NULL) == -1) { in spawn_pager()
|
| H A D | configure | 317 runtest pledge PLEDGE || true
|
| H A D | Makefile | 40 test-pledge.c \
|
| H A D | mandocdb.c | 330 if (pledge("stdio rpath wpath cpath", NULL) == -1) { in mandocdb()
418 if (pledge("stdio rpath", NULL) == -1) { in mandocdb()
|
| H A D | cgi.c | 1075 if (pledge("stdio rpath", NULL) == -1) { in main()
|
| H A D | NEWS | 416 * man.cgi(8) now uses pledge(2), too.
591 * privilege limitation: Use OpenBSD pledge(2) or OS X sandbox_init(3)
|
| /freebsd-14.2/crypto/openssh/ |
| H A D | sandbox-pledge.c | 59 if (pledge("stdio", NULL) == -1) in ssh_sandbox_child()
|
| H A D | ssh-keysign.c | 188 if (pledge("stdio rpath getpw dns id", NULL) != 0) in main()
232 if (pledge("stdio dns", NULL) != 0) in main()
|
| H A D | clientloop.c | 963 if (pledge("stdio unix inet dns proc tty", NULL) == -1) in client_repledge()
968 if (pledge("stdio unix proc tty", NULL) == -1) in client_repledge()
972 if (pledge("stdio proc tty", NULL) == -1) in client_repledge()
1461 if (pledge("stdio rpath wpath cpath unix inet dns recvfd sendfd proc exec id tty", in client_loop()
1467 if (pledge("stdio rpath wpath cpath unix inet dns proc exec tty", in client_loop()
1473 if (pledge("stdio rpath wpath cpath unix inet dns proc tty", in client_loop()
1480 if (pledge("stdio cpath unix inet dns proc tty", NULL) == -1) in client_loop()
1485 if (pledge("stdio unix inet dns proc tty", NULL) == -1) in client_loop()
|
| H A D | mux.c | 1992 if (pledge("stdio proc tty", NULL) == -1) in mux_client_request_session()
2151 if (pledge("stdio proc tty", NULL) == -1) in mux_client_request_stdio_fwd()
|
| H A D | ssh_namespace.h | 484 #define pledge Fssh_pledge macro
|
| H A D | configure.ac | 2012 pledge \
3648 …ify privilege separation sandbox (no, capsicum, darwin, rlimit, seccomp_filter, systrace, pledge)],
3768 AC_MSG_ERROR([pledge sandbox requires pledge(2) support])
3769 SANDBOX_STYLE="pledge"
3770 AC_DEFINE([SANDBOX_PLEDGE], [1], [Sandbox using pledge(2)])
|
| H A D | scp.c | 658 if (pledge("stdio rpath wpath cpath fattr tty proc exec", in main()
|
| H A D | ssh-agent.c | 2483 if (pledge("stdio rpath cpath unix id proc exec", NULL) == -1) in main()
|
| H A D | ChangeLog | 5077 upstream: tighten pledge(2) after session establishment
5091 default pledge(2) in the client.
7267 and not in the pledge(2)'d unprivileged process; fixes regression caused by
|
| /freebsd-14.2/crypto/openssh/openbsd-compat/ |
| H A D | bsd-misc.h | 147 int pledge(const char *promises, const char *paths[]);
|
| H A D | bsd-misc.c | 359 pledge(const char *promises, const char *paths[]) in pledge() function
|
| /freebsd-14.2/secure/usr.sbin/sshd/ |
| H A D | Makefile | 20 sandbox-seccomp-filter.c sandbox-capsicum.c sandbox-pledge.c \
|
| /freebsd-14.2/contrib/xz/src/xz/ |
| H A D | main.c | 151 if (pledge("stdio rpath wpath cpath fattr", "")) { in main()
|
| H A D | file_io.c | 229 if (pledge("stdio", "")) in io_sandbox_enter()
|
| /freebsd-14.2/secure/lib/libssh/ |
| H A D | Makefile | 28 sftp-realpath.c platform-pledge.c platform-tracing.c platform-misc.c \
|
| /freebsd-14.2/usr.bin/diff/ |
| H A D | diff.c | 376 if (pledge("stdio rpath tmppath", NULL) == -1) in main()
|
| /freebsd-14.2/contrib/bc/src/ |
| H A D | vm.c | 944 int r = pledge(promises, execpromises);
|
| /freebsd-14.2/contrib/bc/ |
| H A D | NEWS.md | 442 * Added support for OpenBSD's `pledge()` and `unveil()`.
|