Bjoern A. Zeeb c26fe973a3 Rather than passing around a cached 'priv', pass in an ucred to ...

ipsec*_set_policy and do the privilege check only if needed.

Try to assimilate both ip*_ctloutput code blocks calling ipsec*_set_policy.

Reviewed by:	rwatson

2008-02-02 14:11:31 +00:00

..

ah_var.h

…

ah.h

…

esp_var.h

…

esp.h

…

ipcomp_var.h

…

ipcomp.h

…

ipip_var.h

…

ipsec6.h

Rather than passing around a cached 'priv', pass in an ucred to

2008-02-02 14:11:31 +00:00

ipsec_input.c

Add sysctls to if_enc(4) to control whether the firewalls or

2007-11-28 22:33:53 +00:00

ipsec_mbuf.c

Commit IPv6 support for FAST_IPSEC to the tree.

2007-07-01 11:41:27 +00:00

ipsec_osdep.h

Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); in

2007-06-12 00:12:01 +00:00

ipsec_output.c

Add sysctls to if_enc(4) to control whether the firewalls or

2007-11-28 22:33:53 +00:00

ipsec.c

Rather than passing around a cached 'priv', pass in an ucred to

2008-02-02 14:11:31 +00:00

ipsec.h

Rather than passing around a cached 'priv', pass in an ucred to

2008-02-02 14:11:31 +00:00

key_debug.c

Commit IPv6 support for FAST_IPSEC to the tree.

2007-07-01 11:41:27 +00:00

key_debug.h

…

key_var.h

…

key.c

Commit IPv6 support for FAST_IPSEC to the tree.

2007-07-01 11:41:27 +00:00

key.h

…

keydb.h

…

keysock.c

Move the priv check before the malloc call for so_pcb.

2007-11-16 22:35:33 +00:00

keysock.h

…

xform_ah.c

Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which

2007-08-06 14:26:03 +00:00

xform_esp.c

Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which

2007-08-06 14:26:03 +00:00

xform_ipcomp.c

Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which

2007-08-06 14:26:03 +00:00

xform_ipip.c

Add sysctls to if_enc(4) to control whether the firewalls or

2007-11-28 22:33:53 +00:00

xform_tcp.c

…

xform.h

Add sysctls to if_enc(4) to control whether the firewalls or

2007-11-28 22:33:53 +00:00