- matthew@cvs.openbsd.org 2014/06/18 02:59:13
[sandbox-systrace.c]
Now that we have a dedicated getentropy(2) system call for
arc4random(3), we can disallow __sysctl(2) in OpenSSH's systrace
sandbox.
ok djm
diff --git a/ChangeLog b/ChangeLog
index 50e549e..99e59c1 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -4,6 +4,13 @@
[sandbox-systrace.c]
permit SYS_getentropy
from matthew
+ - matthew@cvs.openbsd.org 2014/06/18 02:59:13
+ [sandbox-systrace.c]
+ Now that we have a dedicated getentropy(2) system call for
+ arc4random(3), we can disallow __sysctl(2) in OpenSSH's systrace
+ sandbox.
+
+ ok djm
20140618
- (tim) [openssh/session.c] Work around to get chroot sftp working on UnixWare