Bjoern A. Zeeb
813dd6ae5e
Restrict arp, ndp and theoretically the FIB listing (if not
...
read with libkvm) to the addresses of a prison, when inside a
jail. [1]
As the patch from the PR was pre-'new-arp', add checks to the
llt_dump handlers as well.
While touching RTM_GET in route_output(), consistently use
curthread credentials rather than the creds from the socket
there. [2]
PR: kern/68189
Submitted by: Mark Delany <sxcg2-fuwxj@qmda.emu.st> [1]
Discussed with: rwatson [2]
Reviewed by: rwatson
MFC after: 4 weeks
2009-01-09 21:57:49 +00:00
..
2008-12-02 21:37:28 +00:00
2008-12-02 21:37:28 +00:00
2008-12-17 13:00:18 +00:00
2007-12-10 16:03:40 +00:00
2009-01-05 20:29:01 +00:00
2007-12-10 16:03:40 +00:00
2008-12-12 02:07:45 +00:00
2007-12-10 16:03:40 +00:00
2008-12-15 21:50:54 +00:00
2008-11-27 12:04:35 +00:00
2008-12-11 16:26:38 +00:00
2008-12-17 10:03:49 +00:00
2008-12-16 02:30:42 +00:00
2008-12-15 06:10:57 +00:00
2009-01-09 21:57:49 +00:00
2008-10-02 00:32:59 +00:00
2007-12-10 16:03:40 +00:00
2008-12-02 21:37:28 +00:00
2007-12-10 16:03:40 +00:00
2008-12-22 12:54:52 +00:00
2008-12-02 21:37:28 +00:00
2008-03-14 11:44:30 +00:00
2008-12-02 21:37:28 +00:00
2007-12-10 16:03:40 +00:00
2008-12-17 13:00:18 +00:00
2008-12-15 06:10:57 +00:00
2009-01-04 21:13:51 +00:00
2007-12-10 16:03:40 +00:00
2008-12-02 21:37:28 +00:00
2008-12-24 01:08:18 +00:00
2008-12-17 10:27:34 +00:00
2008-12-17 10:03:49 +00:00
2008-12-17 10:03:49 +00:00
2007-12-10 16:03:40 +00:00
2007-12-10 16:03:40 +00:00
2008-12-17 13:00:18 +00:00
2008-12-13 19:13:03 +00:00
2008-12-02 21:37:28 +00:00
2007-12-10 16:03:40 +00:00
2008-12-02 21:37:28 +00:00
2008-12-06 13:19:54 +00:00
2008-07-09 16:45:30 +00:00
2008-12-11 16:26:38 +00:00
2009-01-06 13:27:56 +00:00
2007-12-10 16:03:40 +00:00
2008-12-15 06:10:57 +00:00