Bjoern A. Zeeb c26fe973a3 Rather than passing around a cached 'priv', pass in an ucred to ... ipsec*_set_policy and do the privilege check only if needed. Try to assimilate both ip*_ctloutput code blocks calling ipsec*_set_policy. Reviewed by: rwatson		2008-02-02 14:11:31 +00:00
..
ah_var.h
ah.h
esp_var.h
esp.h
ipcomp_var.h
ipcomp.h
ipip_var.h
ipsec6.h	Rather than passing around a cached 'priv', pass in an ucred to	2008-02-02 14:11:31 +00:00
ipsec_input.c	Add sysctls to if_enc(4) to control whether the firewalls or	2007-11-28 22:33:53 +00:00
ipsec_mbuf.c	Commit IPv6 support for FAST_IPSEC to the tree.	2007-07-01 11:41:27 +00:00
ipsec_osdep.h	Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); in	2007-06-12 00:12:01 +00:00
ipsec_output.c	Add sysctls to if_enc(4) to control whether the firewalls or	2007-11-28 22:33:53 +00:00
ipsec.c	Rather than passing around a cached 'priv', pass in an ucred to	2008-02-02 14:11:31 +00:00
ipsec.h	Rather than passing around a cached 'priv', pass in an ucred to	2008-02-02 14:11:31 +00:00
key_debug.c	Commit IPv6 support for FAST_IPSEC to the tree.	2007-07-01 11:41:27 +00:00
key_debug.h
key_var.h
key.c	Commit IPv6 support for FAST_IPSEC to the tree.	2007-07-01 11:41:27 +00:00
key.h
keydb.h
keysock.c	Move the priv check before the malloc call for so_pcb.	2007-11-16 22:35:33 +00:00
keysock.h
xform_ah.c	Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which	2007-08-06 14:26:03 +00:00
xform_esp.c	Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which	2007-08-06 14:26:03 +00:00
xform_ipcomp.c	Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which	2007-08-06 14:26:03 +00:00
xform_ipip.c	Add sysctls to if_enc(4) to control whether the firewalls or	2007-11-28 22:33:53 +00:00
xform_tcp.c
xform.h	Add sysctls to if_enc(4) to control whether the firewalls or	2007-11-28 22:33:53 +00:00