freebsd-dev/sys/netinet
Matthew Dillon fe41ca530c Introduce the ability to flag a sysctl for operation at secure level 2 or 3
in addition to secure level 1.  The mask supports up to a secure level of 8
but only add defines through CTLFLAG_SECURE3 for now.

As per the missif in the log entry for 1.11 of ip_fw2.c which added the
secure flag to the IPFW sysctl's in the first place, change the secure
level requirement from 1 to 3 now that we have support for it.

Reviewed by:	imp
With Design Suggestions by:	imp
2003-01-14 19:35:33 +00:00
..
libalias Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup, 2003-01-01 18:49:04 +00:00
accf_data.c Remove so*_locked(), which were backed out by mistake. 2002-06-18 07:42:02 +00:00
accf_http.c Remove so*_locked(), which were backed out by mistake. 2002-06-18 07:42:02 +00:00
icmp6.h s/__attribute__((__packed__))/__packed/g 2002-09-23 06:25:08 +00:00
icmp_var.h Remove __P. 2002-03-19 21:25:46 +00:00
if_atm.c - Change the newly turned INVARIANTS #ifdef blocks (they were changed from 2002-05-21 18:52:24 +00:00
if_atm.h Remove __P. 2002-03-19 21:25:46 +00:00
if_ether.c Clear the target hardware address field when generating an ARP request. 2003-01-10 00:04:53 +00:00
if_ether.h Fixed some style bugs in the removal of __P(()). Continuation lines 2002-03-24 10:19:10 +00:00
igmp_var.h Remove __P. 2002-03-19 21:25:46 +00:00
igmp.c Back out some style changes. They are not urgent, 2002-11-20 19:00:54 +00:00
igmp.h
in_cksum.c
in_gif.c last arg of in6?_gif_output() is not used any more. 2002-10-17 17:47:55 +00:00
in_gif.h last arg of in6?_gif_output() is not used any more. 2002-10-17 17:47:55 +00:00
in_pcb.c temporarily disallow FAST_IPSEC and INET6 to avoid potential panics; 2002-11-08 23:50:32 +00:00
in_pcb.h Turn off duplicate lock checking for inp locks because udp_input() 2002-11-12 20:44:38 +00:00
in_proto.c FAST_IPSEC fixups: 2002-11-08 23:37:50 +00:00
in_rmx.c SMP locking for radix nodes. 2002-12-24 03:03:39 +00:00
in_systm.h Remove __P. 2002-03-19 21:25:46 +00:00
in_var.h Fixed some style bugs in the removal of __P(()). Continuation lines 2002-03-24 10:19:10 +00:00
in.c Lock up ifaddr reference counts. 2002-12-18 11:46:59 +00:00
in.h Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup, 2003-01-01 18:49:04 +00:00
ip6.h s/__attribute__((__packed__))/__packed/g 2002-09-23 06:25:08 +00:00
ip_divert.c Renumber IPPROTO_DIVERT out of the range of valid IP protocol numbers. 2002-10-29 16:46:13 +00:00
ip_dummynet.c Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup, 2003-01-01 18:49:04 +00:00
ip_dummynet.h o Trim EOL whitespaces. 2002-12-15 10:24:36 +00:00
ip_ecn.c initialize local variable explicitly 2002-04-11 02:14:21 +00:00
ip_ecn.h Remove __P. 2002-03-19 21:25:46 +00:00
ip_encap.c o Untangle the confusion with the malloc flags {M_WAITOK, M_NOWAIT} and 2002-12-19 22:58:27 +00:00
ip_encap.h Remove __P. 2002-03-19 21:25:46 +00:00
ip_flow.c
ip_flow.h
ip_fw2.c Introduce the ability to flag a sysctl for operation at secure level 2 or 3 2003-01-14 19:35:33 +00:00
ip_fw.c Bridged packets are supplied to the firewall with their IP header 2002-12-27 17:43:25 +00:00
ip_fw.h Oops, forgot to commit this file. This is part of the fix 2002-10-24 22:32:13 +00:00
ip_gre.c MFS: recognize gre packets used in the WCCP protocol. 2002-12-07 14:22:05 +00:00
ip_gre.h de-__P(). 2002-10-16 22:27:27 +00:00
ip_icmp.c correct style bogons 2002-12-30 18:45:31 +00:00
ip_icmp.h Fix two instances of variant struct definitions in sys/netinet: 2002-10-20 22:52:07 +00:00
ip_id.c Remove __P. 2002-03-19 21:25:46 +00:00
ip_input.c Correct mbuf packet header propagation. Previously, packet headers 2002-12-30 20:22:40 +00:00
ip_mroute.c Massive cleanup of the ip_mroute code. 2002-11-15 22:53:53 +00:00
ip_mroute.h Massive cleanup of the ip_mroute code. 2002-11-15 22:53:53 +00:00
ip_output.c Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup, 2003-01-01 18:49:04 +00:00
ip_var.h Back out the ip_fragment() code -- it is not urgent to have it in now, 2002-11-20 18:56:25 +00:00
ip.h Fix two instances of variant struct definitions in sys/netinet: 2002-10-20 22:52:07 +00:00
ipprotosw.h
raw_ip.c Back out some style changes. They are not urgent, 2002-11-20 19:00:54 +00:00
tcp_debug.c It's now sufficient to rely on a nested include of _label.h to make sure 2002-08-15 14:34:45 +00:00
tcp_debug.h make the strings for tcptimers, tanames and prurequests const to silence 2002-08-16 09:07:59 +00:00
tcp_fsm.h WARNS=n and lint(1) silencer. Declare an array of (const) strings 2002-02-03 11:57:32 +00:00
tcp_input.c Fix NewReno. 2003-01-13 11:01:20 +00:00
tcp_output.c Fix oops in my last commit, I was calculating a new length but then not 2002-10-16 19:16:33 +00:00
tcp_reass.c Fix NewReno. 2003-01-13 11:01:20 +00:00
tcp_seq.h Fix NewReno. 2003-01-13 11:01:20 +00:00
tcp_subr.c Validate inp to prevent an use after free. 2002-12-24 21:00:31 +00:00
tcp_syncache.c Validate inp before de-referencing it. 2003-01-05 07:56:24 +00:00
tcp_timer.c Fix NewReno. 2003-01-13 11:01:20 +00:00
tcp_timer.h make the strings for tcptimers, tanames and prurequests const to silence 2002-08-16 09:07:59 +00:00
tcp_timewait.c Validate inp to prevent an use after free. 2002-12-24 21:00:31 +00:00
tcp_usrreq.c Unbreak the automatic remapping of an INADDR_ANY destination address 2002-10-24 02:02:34 +00:00
tcp_var.h Fix NewReno. 2003-01-13 11:01:20 +00:00
tcp.h Include <sys/cdefs.h> so the visibility conditionals are available. 2002-10-02 04:22:34 +00:00
tcpip.h
udp_usrreq.c Back out some style changes. They are not urgent, 2002-11-20 19:00:54 +00:00
udp_var.h Notify functions can destroy the pcb, so they have to return an 2002-06-14 08:35:21 +00:00
udp.h