freebsd-dev/sys/net
Bruce M Simpson cd83bbd2aa Implement ifnet cloning for tun(4)/tap(4).
Make devfs cloning a sysctl/tunable which defaults to on.

If devfs cloning is enabled, only the super-user may create
tun(4)/tap(4)/vmnet(4) instances. Devfs cloning is still enabled by
default; it may be disabled from the loader or via sysctl with
"net.link.tap.devfs_cloning" and "net.link.tun.devfs_cloning".

Disabling its use affects potentially all tun(4)/tap(4) consumers
including OpenSSH, OpenVPN and VMware.

PR:		105228 (potentially also 90413, 105570)
Submitted by:	Landon Fuller
Tested by:	Andrej Tobola
Approved by:	core (rwatson)
MFC after:	4 weeks
2007-02-04 16:32:46 +00:00
..
bpf_filter.c
bpf_jitter.c
bpf_jitter.h
bpf.c Remove slightly dubious comment; add descriptive strings for several 2007-01-28 16:38:44 +00:00
bpf.h
bpfdesc.h Update comment for struct bpf_d: we now store buffered packets for BPF 2007-01-29 14:41:03 +00:00
bridgestp.c Set topology change propagation on all ports _except_ the caller. 2007-01-18 07:13:01 +00:00
bridgestp.h These days P2P means peer-2-peer (also well known from serveral filesharing 2006-12-11 23:46:40 +00:00
bsd_comp.c Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h 2006-10-22 11:52:19 +00:00
ethernet.h style(9) nit. Prefer struct[space]name[space]{ to make grep searches more 2007-01-01 21:49:39 +00:00
fddi.h
firewire.h
if_arc.h
if_arcsubr.c
if_arp.h
if_atm.h
if_atmsubr.c Remove obfuscating OpenBSD/NetBSD/BSDI/FreeBSD 2.x/FreeBSD 5.x ifdefs 2006-12-01 22:45:43 +00:00
if_bridge.c These days P2P means peer-2-peer (also well known from serveral filesharing 2006-12-11 23:46:40 +00:00
if_bridgevar.h These days P2P means peer-2-peer (also well known from serveral filesharing 2006-12-11 23:46:40 +00:00
if_clone.c
if_clone.h
if_disc.c
if_dl.h
if_ef.c
if_enc.c Various bpf(4) related fixes to catch places up to the new bpf(4) 2006-12-29 13:59:50 +00:00
if_ethersubr.c Note that rev. 1.221 introduced a local workaround for a general problem. 2006-12-24 08:52:13 +00:00
if_faith.c
if_fddisubr.c Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h 2006-10-22 11:52:19 +00:00
if_fwsubr.c Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h 2006-10-22 11:52:19 +00:00
if_gif.c Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h 2006-10-22 11:52:19 +00:00
if_gif.h
if_gre.c Sweep kernel replacing suser(9) calls with priv(9) calls, assigning 2006-11-06 13:42:10 +00:00
if_gre.h
if_iso88025subr.c Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h 2006-10-22 11:52:19 +00:00
if_llc.h Move the __packed declarations. This makes sizeof(struct llc) 8 again 2006-12-01 17:50:11 +00:00
if_loop.c fixed a bug that local IPv6 traffic (to an address configured on an 2006-09-22 01:31:22 +00:00
if_media.c
if_media.h First cut at half/quarter-rate 11a channel support (e.g. for use 2006-12-27 18:46:18 +00:00
if_mib.c
if_mib.h
if_ppp.c Use callout mechanism instead of timeout()/untimeout(). 2006-12-05 18:54:21 +00:00
if_ppp.h
if_pppvar.h Use callout mechanism instead of timeout()/untimeout(). 2006-12-05 18:54:21 +00:00
if_sl.c Sweep kernel replacing suser(9) calls with priv(9) calls, assigning 2006-11-06 13:42:10 +00:00
if_slvar.h
if_sppp.h
if_spppfr.c
if_spppsubr.c MFp4: 92972, 98913 + one more change 2006-12-12 12:17:58 +00:00
if_stf.c Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h 2006-10-22 11:52:19 +00:00
if_stf.h
if_tap.c Implement ifnet cloning for tun(4)/tap(4). 2007-02-04 16:32:46 +00:00
if_tap.h Fix our ioctl(2) implementation when the argument is "int". New 2006-09-27 19:57:02 +00:00
if_tapvar.h
if_tun.c Implement ifnet cloning for tun(4)/tap(4). 2007-02-04 16:32:46 +00:00
if_tun.h
if_types.h
if_var.h
if_vlan_var.h
if_vlan.c - Don't defer the removal of an 802.1q header for no real reason. 2006-12-30 21:10:25 +00:00
if.c The recent issues with em(4) interface has shown that the old 4.4BSD 2006-11-30 15:02:01 +00:00
if.h
iso88025.h
netisr.c Change net.isr.direct from defaulting to 0 to 1 in 7-CURRENT. This 2006-11-28 11:19:36 +00:00
netisr.h
pfil.c
pfil.h
pfkeyv2.h
ppp_comp.h
ppp_deflate.c
ppp_defs.h
ppp_tty.c Use callout mechanism instead of timeout()/untimeout(). 2006-12-05 18:54:21 +00:00
radix.c
radix.h
raw_cb.c
raw_cb.h
raw_usrreq.c Sweep kernel replacing suser(9) calls with priv(9) calls, assigning 2006-11-06 13:42:10 +00:00
route.c Initialize a local variable in 2 places just before it is used, not always 2006-11-23 05:57:15 +00:00
route.h
rtsock.c Sweep kernel replacing suser(9) calls with priv(9) calls, assigning 2006-11-06 13:42:10 +00:00
slcompress.c
slcompress.h
slip.h
zlib.c
zlib.h