Matthew Dillon fe41ca530c Introduce the ability to flag a sysctl for operation at secure level 2 or 3 ...

in addition to secure level 1.  The mask supports up to a secure level of 8
but only add defines through CTLFLAG_SECURE3 for now.

As per the missif in the log entry for 1.11 of ip_fw2.c which added the
secure flag to the IPFW sysctl's in the first place, change the secure
level requirement from 1 to 3 now that we have support for it.

Reviewed by:	imp
With Design Suggestions by:	imp

2003-01-14 19:35:33 +00:00

..

libalias

Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,

2003-01-01 18:49:04 +00:00

accf_data.c

…

accf_http.c

…

icmp6.h

…

icmp_var.h

…

if_atm.c

…

if_atm.h

…

if_ether.c

Clear the target hardware address field when generating an ARP request.

2003-01-10 00:04:53 +00:00

if_ether.h

…

igmp_var.h

…

igmp.c

…

igmp.h

…

in_cksum.c

…

in_gif.c

…

in_gif.h

…

in_pcb.c

…

in_pcb.h

…

in_proto.c

…

in_rmx.c

SMP locking for radix nodes.

2002-12-24 03:03:39 +00:00

in_systm.h

…

in_var.h

…

in.c

Lock up ifaddr reference counts.

2002-12-18 11:46:59 +00:00

in.h

Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,

2003-01-01 18:49:04 +00:00

ip6.h

…

ip_divert.c

…

ip_dummynet.c

Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,

2003-01-01 18:49:04 +00:00

ip_dummynet.h

o Trim EOL whitespaces.

2002-12-15 10:24:36 +00:00

ip_ecn.c

…

ip_ecn.h

…

ip_encap.c

o Untangle the confusion with the malloc flags {M_WAITOK, M_NOWAIT} and

2002-12-19 22:58:27 +00:00

ip_encap.h

…

ip_flow.c

…

ip_flow.h

…

ip_fw2.c

Introduce the ability to flag a sysctl for operation at secure level 2 or 3

2003-01-14 19:35:33 +00:00

ip_fw.c

Bridged packets are supplied to the firewall with their IP header

2002-12-27 17:43:25 +00:00

ip_fw.h

…

ip_gre.c

…

ip_gre.h

…

ip_icmp.c

correct style bogons

2002-12-30 18:45:31 +00:00

ip_icmp.h

…

ip_id.c

…

ip_input.c

Correct mbuf packet header propagation. Previously, packet headers

2002-12-30 20:22:40 +00:00

ip_mroute.c

…

ip_mroute.h

…

ip_output.c

Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,

2003-01-01 18:49:04 +00:00

ip_var.h

…

ip.h

…

ipprotosw.h

…

raw_ip.c

…

tcp_debug.c

…

tcp_debug.h

…

tcp_fsm.h

…

tcp_input.c

Fix NewReno.

2003-01-13 11:01:20 +00:00

tcp_output.c

…

tcp_reass.c

Fix NewReno.

2003-01-13 11:01:20 +00:00

tcp_seq.h

Fix NewReno.

2003-01-13 11:01:20 +00:00

tcp_subr.c

Validate inp to prevent an use after free.

2002-12-24 21:00:31 +00:00

tcp_syncache.c

Validate inp before de-referencing it.

2003-01-05 07:56:24 +00:00

tcp_timer.c

Fix NewReno.

2003-01-13 11:01:20 +00:00

tcp_timer.h

…

tcp_timewait.c

Validate inp to prevent an use after free.

2002-12-24 21:00:31 +00:00

tcp_usrreq.c

…

tcp_var.h

Fix NewReno.

2003-01-13 11:01:20 +00:00

tcp.h

…

tcpip.h

…

udp_usrreq.c

…

udp_var.h

…

udp.h

…