OpenBSD CVS

CVS log for src/usr.sbin/tcpdump/privsep.h


[BACK] Up to [local] / src / usr.sbin / tcpdump

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.12 / (download) - annotate - [select for diffs], Mon Mar 18 00:09:22 2019 UTC (5 years, 2 months ago) by dlg
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4, OPENBSD_7_3_BASE, OPENBSD_7_3, OPENBSD_7_2_BASE, OPENBSD_7_2, OPENBSD_7_1_BASE, OPENBSD_7_1, OPENBSD_7_0_BASE, OPENBSD_7_0, OPENBSD_6_9_BASE, OPENBSD_6_9, OPENBSD_6_8_BASE, OPENBSD_6_8, OPENBSD_6_7_BASE, OPENBSD_6_7, OPENBSD_6_6_BASE, OPENBSD_6_6, OPENBSD_6_5_BASE, OPENBSD_6_5, HEAD
Changes since 1.11: +2 -2 lines
Diff to previous 1.11 (colored)

support configuring BIOCSFILDROP with tcpdump.

this allows tcpdump to be used a quick and dirty firewall. it also
looks like an amazing foot-gun, so be careful.

for example `tcpdump -B drop -i ix1 udp and port 7` lets you
completely drop discard packets in the hardware interrupt handler.

ok sthen@ mikeb@ claudio@ visa@

Revision 1.11 / (download) - annotate - [select for diffs], Thu Nov 8 14:06:09 2018 UTC (5 years, 6 months ago) by brynet
Branch: MAIN
Changes since 1.10: +3 -10 lines
Diff to previous 1.10 (colored)

Hoist opening pf.os(5) fingerprints '-o' earlier so that it doesn't
need to be unveiled at runtime in the monitor process.

Cleanup the unused internal privsep "getlines" code, we now explictly
fdpass the OS fingerprints file instead.

ok mestre@ kn@

Revision 1.10 / (download) - annotate - [select for diffs], Fri Sep 8 19:10:57 2017 UTC (6 years, 8 months ago) by brynet
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE, OPENBSD_6_4, OPENBSD_6_3_BASE, OPENBSD_6_3, OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.9: +1 -0 lines
Diff to previous 1.9 (colored)

fork+exec model for tcpdump(8); re-exec the privileged child after fork

While tcpdump isn't a daemon in the traditional sense, it's not uncommon
for people to have long running sessions.  At least on OpenBSD, this is
even safe thanks to the existing privsep design by otto@, canacar@ and
pledge(2) work done by deraadt.

ok deraadt@

Revision 1.9 / (download) - annotate - [select for diffs], Wed Jun 14 20:48:54 2017 UTC (6 years, 11 months ago) by akfaew
Branch: MAIN
Changes since 1.8: +1 -2 lines
Diff to previous 1.8 (colored)

Don't support loading appletalk addresses from /etc/appletalk.names.

OK deraadt@

Revision 1.8 / (download) - annotate - [select for diffs], Tue Jul 14 20:23:40 2015 UTC (8 years, 10 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1, OPENBSD_6_0_BASE, OPENBSD_6_0, OPENBSD_5_9_BASE, OPENBSD_5_9, OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.7: +5 -1 lines
Diff to previous 1.7 (colored)

Move the BIOCGSTATS ioctl operation done by the tcpdump process
(at ^C time) into a services provided by the privsep monitor.
ok canacar

Revision 1.7 / (download) - annotate - [select for diffs], Tue Aug 25 06:59:17 2009 UTC (14 years, 9 months ago) by jsg
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7, OPENBSD_5_6_BASE, OPENBSD_5_6, OPENBSD_5_5_BASE, OPENBSD_5_5, OPENBSD_5_4_BASE, OPENBSD_5_4, OPENBSD_5_3_BASE, OPENBSD_5_3, OPENBSD_5_2_BASE, OPENBSD_5_2, OPENBSD_5_1_BASE, OPENBSD_5_1, OPENBSD_5_0_BASE, OPENBSD_5_0, OPENBSD_4_9_BASE, OPENBSD_4_9, OPENBSD_4_8_BASE, OPENBSD_4_8, OPENBSD_4_7_BASE, OPENBSD_4_7
Changes since 1.6: +2 -2 lines
Diff to previous 1.6 (colored)

djm accidentally changed the type of dirfilt in the prototypes
of pcap_live and priv_pcap_live in rev 1.6 to differ from the implementations,
change the type back to what it was.

ok djm@

Revision 1.6 / (download) - annotate - [select for diffs], Fri Apr 18 21:35:11 2008 UTC (16 years, 1 month ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE, OPENBSD_4_6, OPENBSD_4_5_BASE, OPENBSD_4_5, OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.5: +3 -2 lines
Diff to previous 1.5 (colored)

add filtering on direction; ok mpf@ deraadt@ feedback jmc@

Revision 1.5 / (download) - annotate - [select for diffs], Fri Mar 25 10:35:14 2005 UTC (19 years, 2 months ago) by otto
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3, OPENBSD_4_2_BASE, OPENBSD_4_2, OPENBSD_4_1_BASE, OPENBSD_4_1, OPENBSD_4_0_BASE, OPENBSD_4_0, OPENBSD_3_9_BASE, OPENBSD_3_9, OPENBSD_3_8_BASE, OPENBSD_3_8
Changes since 1.4: +1 -1 lines
Diff to previous 1.4 (colored)

whitespace

Revision 1.4 / (download) - annotate - [select for diffs], Sun Mar 6 18:44:50 2005 UTC (19 years, 3 months ago) by reyk
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE, OPENBSD_3_7
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (colored)

add support for multiple DLTs using the -L and -y options.

ok canacar@

Revision 1.3 / (download) - annotate - [select for diffs], Sat May 15 13:13:05 2004 UTC (20 years ago) by otto
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE, OPENBSD_3_6
Changes since 1.2: +1 -1 lines
Diff to previous 1.2 (colored)

Naming consistency. From Alexander Guy. ok canacar@

Revision 1.2 / (download) - annotate - [select for diffs], Sat Jan 31 15:13:03 2004 UTC (20 years, 4 months ago) by otto
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE, OPENBSD_3_5
Changes since 1.1: +3 -4 lines
Diff to previous 1.1 (colored)

general cleanup and better SIGCHLD handling from millert@
ok canacar@

Revision 1.1 / (download) - annotate - [select for diffs], Wed Jan 28 19:44:55 2004 UTC (20 years, 4 months ago) by canacar
Branch: MAIN

privilege separated tcpdump, joint work with otto@

tested by avsm@ vincent@ dhartmei@ markus@ hshoexer@ and others
go for it deraadt@

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.