|
|
@58407
|
9 years |
vboxsync |
SUPR3HardenedMain.cpp: @page pg_hardening updates.
|
|
|
@58406
|
9 years |
vboxsync |
SUPR3HardenedMain.cpp: @page pg_hardening updates.
|
|
|
@58405
|
9 years |
vboxsync |
SUPR3HardenedMain.cpp: @page pg_hardening updates.
|
|
|
@58402
|
9 years |
vboxsync |
SUPR3HardenedMain.cpp: @page pg_hardening updates. No 'ing thanks to …
|
|
|
@58385
|
9 years |
vboxsync |
SUP: typo nits.
|
|
|
@58363
|
9 years |
vboxsync |
SUPR3HardenedMain.cpp: Started on a @page about the code, still a lot …
|
|
|
@58340
|
9 years |
vboxsync |
HostDrivers: Doxygen fixes
|
|
|
@58132
|
9 years |
vboxsync |
*: Doxygen fixes.
|
|
|
@57823
|
9 years |
vboxsync |
VBoxStartup.log -> VBoxHardening.log; option renamed likewise.
|
|
|
@57358
|
9 years |
vboxsync |
*: scm cleanup run.
|
|
|
@56819
|
9 years |
vboxsync |
build fix
|
|
|
@56818
|
9 years |
vboxsync |
SUPR3HardenedMain.cpp: Must apply SUPSECMAIN_FLAGS_OSX_VM_APP in …
|
|
|
@56817
|
9 years |
vboxsync |
Attempt at fixing VirtualBoxVM (untested).
|
|
|
@56746
|
9 years |
vboxsync |
SUPHardNt: Need another hack to make VBoxRT.dll load when executing …
|
|
|
@56733
|
9 years |
vboxsync |
SUPHardNt: Allow hardened exectuable binaries in the 'testcase' …
|
|
|
@56293
|
9 years |
vboxsync |
HostDrivers: Updated (C) year.
|
|
|
@54998
|
10 years |
vboxsync |
supHardNt: Some more memory replacment hacking - take evasive action …
|
|
|
@53045
|
10 years |
vboxsync |
SUP: Reduce LdrLoadDll logging. Still one log statement needing …
|
|
|
@53004
|
10 years |
vboxsync |
SUP: Resolve and call RTLogRelPrintf dynamically to put errors in the …
|
|
|
@53002
|
10 years |
vboxsync |
VBoxDrv-win.cpp: Keep the error info string from failed VBoxDrv and …
|
|
|
@52971
|
10 years |
vboxsync |
fixed a couple of error messages.
|
|
|
@52965
|
10 years |
vboxsync |
Another sanity check.
|
|
|
@52962
|
10 years |
vboxsync |
SUP: Check the entire NTDLL during process verification now that we're …
|
|
|
@52949
|
10 years |
vboxsync |
SUP: Do the early init thing on the stub process too.
|
|
|
@52947
|
10 years |
vboxsync |
SUP: Implemented early VM process vboxdrv initialization.
|
|
|
@52943
|
10 years |
vboxsync |
SUP: The child side of early VM process init.
|
|
|
@52941
|
10 years |
vboxsync |
Use our own heap in the hope that we can use it before ntdll is really …
|
|
|
@52940
|
10 years |
vboxsync |
Eliminating some more kernel32.dll dependencies, marking APIs we like …
|
|
|
@52680
|
10 years |
vboxsync |
SUP: Put a hard size limit on the startup log.
|
|
|
@52632
|
10 years |
vboxsync |
bugfix in previous commit with some new parent watcher code (disabled).
|
|
|
@52527
|
10 years |
vboxsync |
SUP: Reneable threading before doing TrustedError.
|
|
|
@52523
|
10 years |
vboxsync |
SUP: Sabotage thread creation in the stub process and for the initial …
|
|
|
@52424
|
10 years |
vboxsync |
Only VirtualBox.dll has a TrustedError method, so add a flag to …
|
|
|
@52403
|
10 years |
vboxsync |
SUP,IPRT: Extended RTLdrQueryPropEx with a pvBits parameter, …
|
|
|
@52366
|
10 years |
vboxsync |
SUP: Cache images for process verficiation.
|
|
|
@52356
|
10 years |
vboxsync |
SUP: Manual imports.
|
|
|
@52204
|
10 years |
vboxsync |
SUP,LDR: Changed RTLdrGetBits to allow not resolving imports. Combined …
|
|
|
@52169
|
10 years |
vboxsync |
SUP: Added logging capabilities to the hardened stub.
|
|
|
@52163
|
10 years |
vboxsync |
SUP: Make the middle respawn process wait on both parent and child. …
|
|
|
@52160
|
10 years |
vboxsync |
SUP: some cleanups.
|
|
|
@52139
|
10 years |
vboxsync |
SUP: child-process purification to avoid sysfer.dll.
|
|
|
@52089
|
10 years |
vboxsync |
SUP: Don't verify the VM selector process (SUPSECMAIN_FLAGS_DONT_OPEN_DEV).
|
|
|
@52083
|
10 years |
vboxsync |
SUP: delay signature checking of the vbox files till we actually use …
|
|
|
@51770
|
10 years |
vboxsync |
Merged in iprt++ dev branch.
|
|
|
@49500
|
11 years |
vboxsync |
Warning.
|
|
|
@49319
|
11 years |
vboxsync |
Support: build fix for OS/2
|
|
|
@49211
|
11 years |
vboxsync |
SUP: some minor improvements.
|
|
|
@44528
|
12 years |
vboxsync |
header (C) fixes
|
|
|
@44173
|
12 years |
vboxsync |
SUPDrv,SUPLib: Introducing /dev/vboxdrvu on darwin (other platforms …
|
|
|
@39538
|
13 years |
vboxsync |
HostDrivers/Support: compile fix
|
|
|
@38636
|
13 years |
vboxsync |
*,IPRT: Redid the ring-3 init to always convert the arguments to UTF-8.
|
|
|
@38076
|
13 years |
vboxsync |
SUPR3HardenedMain: free privset if allocated.
|
|
|
@37596
|
13 years |
vboxsync |
*: RTFILE becomes a pointer, RTFileOpen++ expands it's flags paramter …
|
|
|
@35311
|
14 years |
vboxsync |
UPR3HardenedMain.cpp: next attempt at getting Solaris privileges …
|
|
|
@35307
|
14 years |
vboxsync |
SUPR3HardenedMain.cpp: next attempt at properly updating privileges on …
|
|
|
@34701
|
14 years |
vboxsync |
SUPR3HardenedMain: back out failed attempt to handle privilege …
|
|
|
@34448
|
14 years |
vboxsync |
SUPR3HardenedMain: copy/paste bug
|
|
|
@34445
|
14 years |
vboxsync |
SUPR3HardenedMain: attempt to properly fix the updating of privileges …
|
|
|
@34372
|
14 years |
vboxsync |
comment update
|
|
|
@34364
|
14 years |
vboxsync |
SUPR3HardenedMain: on Solaris don't touch the privilege set for the …
|
|
|
@33595
|
14 years |
vboxsync |
src/*: more spelling fixes (logging), thanks Timeless!
|
|
|
@33540
|
14 years |
vboxsync |
*: spelling fixes, thanks Timeless!
|
|
|
@28800
|
15 years |
vboxsync |
Automated rebranding to Oracle copyright/license strings via filemuncher
|
|
|
@27877
|
15 years |
vboxsync |
linux/hardened: call prctl(PR_SET_DUMPABLE) to make VBox binaries …
|
|
|
@26498
|
15 years |
vboxsync |
lots under src/VBox: whitespace cleanup.
|
|
|
@25558
|
15 years |
vboxsync |
FreeBSD/iprt,suplib: Review and cleanup of r56138. Hope it compiles…
|
|
|
@25472
|
15 years |
vboxsync |
FreeBSD: Use sysctl instead of procfs to retrieve executable path and …
|
|
|
@19924
|
16 years |
vboxsync |
IPRT,SUP: Renamed RTPathProgram to RTPathExecDir to make it clear what …
|
|
|
@18499
|
16 years |
vboxsync |
SUPR3HardenedMain: size_t
|
|
|
@18242
|
16 years |
vboxsync |
FE/Qt4: better error messages if something goes wrong during the …
|
|
|
@16067
|
16 years |
vboxsync |
sles10.1 fix
|
|
|
@16053
|
16 years |
vboxsync |
typo
|
|
|
@16051
|
16 years |
vboxsync |
SUPR3HardenedMain: comment.
|
|
|
@16050
|
16 years |
vboxsync |
SUPR3: don't change the capabilities if started as root
|
|
|
@16048
|
16 years |
vboxsync |
SUPR3: added environment options VBOX_HARD_CAP_NET_RAW and …
|
|
|
@15884
|
16 years |
vboxsync |
header conflict with Linux ~ 2.6.16
|
|
|
@15873
|
16 years |
vboxsync |
fixed for older Linux kernels
|
|
|
@15871
|
16 years |
vboxsync |
Linux hardened: use direct capset() calls to prevent a dependency to …
|
|
|
@15314
|
16 years |
vboxsync |
SUPR3HardenedMain: split out code grabing privs/caps from the code …
|
|
|
@15313
|
16 years |
vboxsync |
SUPR3HardenedMain: don't die on priv adds Solaris.
|
|
|
@15299
|
16 years |
vboxsync |
line.
|
|
|
@15298
|
16 years |
vboxsync |
SUPR3HardenedMain: Solaris ICMP access.
|
|
|
@15271
|
16 years |
vboxsync |
SUPR3HardenedMain: Solaris net raw access (testing).
|
|
|
@15270
|
16 years |
vboxsync |
SUPR3HardenedMain: Solaris net raw access privilege (testing).
|
|
|
@15180
|
16 years |
vboxsync |
give CAP_NET_RAW a shot on Linux
|
|
|
@13908
|
16 years |
vboxsync |
Fixed include order, a bunch of GCC 3.3 warnings, OS/2 build.
|
|
|
@13503
|
16 years |
vboxsync |
SUPR3HardendedMain: fork before calling TrustedError.
|
|
|
@13458
|
16 years |
vboxsync |
SUPR3HardenedMain: Added optional TrustedError callback to the wrapped …
|
|
|
@12226
|
16 years |
vboxsync |
SUPR3HardenedMain: setresuid copy & past error.
|
|
|
@12114
|
16 years |
vboxsync |
comment
|
|
|
@12112
|
16 years |
vboxsync |
RT_OS_SOLARS not RT_SOLARIS!
|
|
|
@12111
|
16 years |
vboxsync |
#3076/SUPR3HArdenedMain: Make sure the save uid/gid is set to the real id.
|
|
|
@11843
|
16 years |
vboxsync |
#3076: Deal with /proc/self/exe becomming inaccessible on some systems.
|
|
|
@11725
|
16 years |
vboxsync |
#3076: Merged in the branch with the alternate driver authentication …
|