freebsd-dev/sys/netipsec
Bjoern A. Zeeb 190320e237 Add a missing priv check in key_attach to prevent non-su users
from messing with the spdb and sadb.

Problem sneaked in with the fast_ipsec+v6->ipsec merger by no
longer going via raw_usrreqs.pr_attach.

Reported by:	Pawel Worach
Identified by:	rwatson
Reviewed by:	rwatson
MFC after:	3 days
2007-11-12 23:47:48 +00:00
..
ah_var.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ah.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
esp_var.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
esp.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipcomp_var.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipcomp.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipip_var.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
ipsec6.h Commit IPv6 support for FAST_IPSEC to the tree. 2007-07-01 11:41:27 +00:00
ipsec_input.c Fix for an infinite loop in processing ESP, IPv6 packets. 2007-09-12 05:54:53 +00:00
ipsec_mbuf.c Commit IPv6 support for FAST_IPSEC to the tree. 2007-07-01 11:41:27 +00:00
ipsec_osdep.h Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); in 2007-06-12 00:12:01 +00:00
ipsec_output.c Replace hard coded options by their defined PFIL_{IN,OUT} names. 2007-07-19 09:57:54 +00:00
ipsec.c Commit IPv6 support for FAST_IPSEC to the tree. 2007-07-01 11:41:27 +00:00
ipsec.h Commit IPv6 support for FAST_IPSEC to the tree. 2007-07-01 11:41:27 +00:00
key_debug.c Commit IPv6 support for FAST_IPSEC to the tree. 2007-07-01 11:41:27 +00:00
key_debug.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
key_var.h First steps towards IPSec cleanup. 2006-03-25 13:38:52 +00:00
key.c Commit IPv6 support for FAST_IPSEC to the tree. 2007-07-01 11:41:27 +00:00
key.h /* -> /*- for license, minor formatting changes 2005-01-07 01:45:51 +00:00
keydb.h First steps towards IPSec cleanup. 2006-03-25 13:38:52 +00:00
keysock.c Add a missing priv check in key_attach to prevent non-su users 2007-11-12 23:47:48 +00:00
keysock.h Fix stack corruptions on amd64. 2006-01-21 10:44:34 +00:00
xform_ah.c Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which 2007-08-06 14:26:03 +00:00
xform_esp.c Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which 2007-08-06 14:26:03 +00:00
xform_ipcomp.c Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which 2007-08-06 14:26:03 +00:00
xform_ipip.c Replace hard coded options by their defined PFIL_{IN,OUT} names. 2007-07-19 09:57:54 +00:00
xform_tcp.c First steps towards IPSec cleanup. 2006-03-25 13:38:52 +00:00
xform.h Fix more stack corruptions on amd64. 2006-03-30 18:57:04 +00:00