freebsd-nq/sys/netipsec
Bjoern A. Zeeb 190320e237 Add a missing priv check in key_attach to prevent non-su users
from messing with the spdb and sadb.

Problem sneaked in with the fast_ipsec+v6->ipsec merger by no
longer going via raw_usrreqs.pr_attach.

Reported by:	Pawel Worach
Identified by:	rwatson
Reviewed by:	rwatson
MFC after:	3 days
2007-11-12 23:47:48 +00:00
..
ah_var.h
ah.h
esp_var.h
esp.h
ipcomp_var.h
ipcomp.h
ipip_var.h
ipsec6.h Commit IPv6 support for FAST_IPSEC to the tree. 2007-07-01 11:41:27 +00:00
ipsec_input.c Fix for an infinite loop in processing ESP, IPv6 packets. 2007-09-12 05:54:53 +00:00
ipsec_mbuf.c Commit IPv6 support for FAST_IPSEC to the tree. 2007-07-01 11:41:27 +00:00
ipsec_osdep.h Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); in 2007-06-12 00:12:01 +00:00
ipsec_output.c Replace hard coded options by their defined PFIL_{IN,OUT} names. 2007-07-19 09:57:54 +00:00
ipsec.c Commit IPv6 support for FAST_IPSEC to the tree. 2007-07-01 11:41:27 +00:00
ipsec.h Commit IPv6 support for FAST_IPSEC to the tree. 2007-07-01 11:41:27 +00:00
key_debug.c Commit IPv6 support for FAST_IPSEC to the tree. 2007-07-01 11:41:27 +00:00
key_debug.h
key_var.h
key.c Commit IPv6 support for FAST_IPSEC to the tree. 2007-07-01 11:41:27 +00:00
key.h
keydb.h
keysock.c Add a missing priv check in key_attach to prevent non-su users 2007-11-12 23:47:48 +00:00
keysock.h
xform_ah.c Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which 2007-08-06 14:26:03 +00:00
xform_esp.c Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which 2007-08-06 14:26:03 +00:00
xform_ipcomp.c Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which 2007-08-06 14:26:03 +00:00
xform_ipip.c Replace hard coded options by their defined PFIL_{IN,OUT} names. 2007-07-19 09:57:54 +00:00
xform_tcp.c
xform.h