version 1.10, 2014/06/13 08:26:29 |
version 1.11, 2014/06/18 02:59:13 |
|
|
static const struct sandbox_policy preauth_policy[] = { |
static const struct sandbox_policy preauth_policy[] = { |
{ SYS_open, SYSTR_POLICY_NEVER }, |
{ SYS_open, SYSTR_POLICY_NEVER }, |
|
|
|
#ifdef SYS_getentropy |
|
/* OpenBSD 5.6 and newer use getentropy(2) to seed arc4random(3). */ |
|
{ SYS_getentropy, SYSTR_POLICY_PERMIT }, |
|
#else |
|
/* Previous releases used sysctl(3)'s kern.arnd variable. */ |
{ SYS___sysctl, SYSTR_POLICY_PERMIT }, |
{ SYS___sysctl, SYSTR_POLICY_PERMIT }, |
|
#endif |
|
|
{ SYS_close, SYSTR_POLICY_PERMIT }, |
{ SYS_close, SYSTR_POLICY_PERMIT }, |
{ SYS_exit, SYSTR_POLICY_PERMIT }, |
{ SYS_exit, SYSTR_POLICY_PERMIT }, |
{ SYS_getpid, SYSTR_POLICY_PERMIT }, |
{ SYS_getpid, SYSTR_POLICY_PERMIT }, |
{ SYS_getentropy, SYSTR_POLICY_PERMIT }, |
|
{ SYS_gettimeofday, SYSTR_POLICY_PERMIT }, |
{ SYS_gettimeofday, SYSTR_POLICY_PERMIT }, |
{ SYS_clock_gettime, SYSTR_POLICY_PERMIT }, |
{ SYS_clock_gettime, SYSTR_POLICY_PERMIT }, |
{ SYS_madvise, SYSTR_POLICY_PERMIT }, |
{ SYS_madvise, SYSTR_POLICY_PERMIT }, |