Robert Watson 4ed84624a2 Introduce support for Mandatory Access Control and extensible ...

kernel access control.

When fragmenting an IP datagram, invoke an appropriate MAC entry
point so that MAC labels may be copied (...) to the individual
IP fragment mbufs by MAC policies.

When IP options are inserted into an IP datagram when leaving a
host, preserve the label if we need to reallocate the mbuf for
alignment or size reasons.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, NAI Labs

2002-07-31 17:21:01 +00:00

..

libalias

Don't forget to recalculate the IP checksum of the original

2002-07-23 00:16:19 +00:00

accf_data.c

Remove so*_locked(), which were backed out by mistake.

2002-06-18 07:42:02 +00:00

accf_http.c

Remove so*_locked(), which were backed out by mistake.

2002-06-18 07:42:02 +00:00

icmp6.h

Revised MLD-related definitions

2002-05-06 16:28:25 +00:00

icmp_var.h

Remove __P.

2002-03-19 21:25:46 +00:00

if_atm.c

- Change the newly turned INVARIANTS #ifdef blocks (they were changed from

2002-05-21 18:52:24 +00:00

if_atm.h

Remove __P.

2002-03-19 21:25:46 +00:00

if_ether.c

Introduce support for Mandatory Access Control and extensible

2002-07-31 16:45:16 +00:00

if_ether.h

Fixed some style bugs in the removal of __P(()). Continuation lines

2002-03-24 10:19:10 +00:00

igmp_var.h

Remove __P.

2002-03-19 21:25:46 +00:00

igmp.c

Introduce support for Mandatory Access Control and extensible

2002-07-31 16:46:56 +00:00

igmp.h

…

in_cksum.c

…

in_gif.c

just merged cosmetic changes from KAME to ease sync between KAME and FreeBSD.

2002-04-19 04:46:24 +00:00

in_gif.h

Remove __P.

2002-03-19 21:25:46 +00:00

in_pcb.c

cleanup usage of ip6_mapped_addr_on and ip6_v6only. now,

2002-07-25 17:40:45 +00:00

in_pcb.h

do not refer to IN6P_BINDV6ONLY anymore.

2002-07-22 15:51:02 +00:00

in_proto.c

Remove __P.

2002-03-19 21:25:46 +00:00

in_rmx.c

Remove __P.

2002-03-19 21:25:46 +00:00

in_systm.h

Remove __P.

2002-03-19 21:25:46 +00:00

in_var.h

Fixed some style bugs in the removal of __P(()). Continuation lines

2002-03-24 10:19:10 +00:00

in.c

Lock up inpcb.

2002-06-10 20:05:46 +00:00

in.h

Remove some duplicate types that should have been removed as part of

2002-05-11 23:28:51 +00:00

ip6.h

Sync with recent KAME.

2001-06-11 12:39:29 +00:00

ip_divert.c

Introduce support for Mandatory Access Control and extensible

2002-07-31 16:42:47 +00:00

ip_dummynet.c

Fix a panic when doing "ipfw add pipe 1 log ..."

2002-07-17 07:21:42 +00:00

ip_dummynet.h

fix indentation of a comment

2002-06-23 09:14:24 +00:00

ip_ecn.c

initialize local variable explicitly

2002-04-11 02:14:21 +00:00

ip_ecn.h

Remove __P.

2002-03-19 21:25:46 +00:00

ip_encap.c

just merged cosmetic changes from KAME to ease sync between KAME and FreeBSD.

2002-04-19 04:46:24 +00:00

ip_encap.h

Remove __P.

2002-03-19 21:25:46 +00:00

ip_flow.c

s/FREE/free/

2001-11-04 17:35:31 +00:00

ip_flow.h

…

ip_fw2.c

Only log things net.inet.ip.fw.verbose is set

2002-07-24 02:41:19 +00:00

ip_fw.c

Remove (almost all) global variables that were used to hold

2002-06-22 11:51:02 +00:00

ip_fw.h

Fix a panic when doing "ipfw add pipe 1 log ..."

2002-07-17 07:21:42 +00:00

ip_icmp.c

Prevent icmp_reflect() from calling ip_output() with a NULL route

2002-03-22 16:45:54 +00:00

ip_icmp.h

Remove __P.

2002-03-19 21:25:46 +00:00

ip_id.c

Remove __P.

2002-03-19 21:25:46 +00:00

ip_input.c

Introduce support for Mandatory Access Control and extensible

2002-07-31 17:17:51 +00:00

ip_mroute.c

Just a comment on some additional consistency checks that could

2002-06-26 21:00:53 +00:00

ip_mroute.h

Remove __P.

2002-03-19 21:25:46 +00:00

ip_output.c

Introduce support for Mandatory Access Control and extensible

2002-07-31 17:21:01 +00:00

ip_var.h

Introduce support for Mandatory Access Control and extensible

2002-07-30 23:09:20 +00:00

ip.h

o Add IPOPT_ESO for the 'Extended Security' IP option (RFC1108)

2001-12-14 19:37:32 +00:00

ipprotosw.h

KSE Milestone 2

2001-09-12 08:38:13 +00:00

raw_ip.c

Remember to initialize the control block head mutex.

2002-06-11 10:58:57 +00:00

tcp_debug.c

Remove a change that snuck in from my private tree.

2001-12-21 05:07:39 +00:00

tcp_debug.h

…

tcp_fsm.h

WARNS=n and lint(1) silencer. Declare an array of (const) strings

2002-02-03 11:57:32 +00:00

tcp_input.c

Don't shrink socket buffers in tcp_mss(), application might have already

2002-07-22 22:31:09 +00:00

tcp_output.c

Slightly restructure the #ifdef INET6 sections to make the code

2002-06-23 21:25:36 +00:00

tcp_reass.c

Don't shrink socket buffers in tcp_mss(), application might have already

2002-07-22 22:31:09 +00:00

tcp_seq.h

Move initialization of snd_recover into tcp_sendseqinit().

2001-11-21 18:45:51 +00:00

tcp_subr.c

Wire the sysctl output buffer before grabbing any locks to prevent

2002-07-28 19:59:31 +00:00

tcp_syncache.c

One possible code path for syncache_respond() is:

2002-06-28 19:12:38 +00:00

tcp_timer.c

Fix overflows in intermediate calculations in sysctl_msec_to_ticks().

2002-07-20 23:48:59 +00:00

tcp_timer.h

Introduce two new sysctl's:

2002-07-18 19:06:12 +00:00

tcp_timewait.c

Wire the sysctl output buffer before grabbing any locks to prevent

2002-07-28 19:59:31 +00:00

tcp_usrreq.c

Use a common way to release locks before exit.

2002-07-29 09:01:39 +00:00

tcp_var.h

Add the tcps_sndrexmitbad statistic, keep track of late acks that caused

2002-07-19 18:29:38 +00:00

tcp.h

o Minor style(9)ism to make consistent with -STABLE

2001-01-09 18:26:17 +00:00

tcpip.h

Remove struct full_tcpiphdr{}.

2001-02-26 20:10:16 +00:00

udp_usrreq.c

Wire the sysctl output buffer before grabbing any locks to prevent

2002-07-28 19:59:31 +00:00

udp_var.h

Notify functions can destroy the pcb, so they have to return an

2002-06-14 08:35:21 +00:00

udp.h

…