bz 5c6a60df9f Add a missing priv check in key_attach to prevent non-su users ...

from messing with the spdb and sadb.

Problem sneaked in with the fast_ipsec+v6->ipsec merger by no
longer going via raw_usrreqs.pr_attach.

Reported by:	Pawel Worach
Identified by:	rwatson
Reviewed by:	rwatson
MFC after:	3 days

2007-11-12 23:47:48 +00:00

..

ah_var.h

…

ah.h

…

esp_var.h

…

esp.h

…

ipcomp_var.h

…

ipcomp.h

…

ipip_var.h

…

ipsec6.h

Commit IPv6 support for FAST_IPSEC to the tree.

2007-07-01 11:41:27 +00:00

ipsec_input.c

Fix for an infinite loop in processing ESP, IPv6 packets.

2007-09-12 05:54:53 +00:00

ipsec_mbuf.c

Commit IPv6 support for FAST_IPSEC to the tree.

2007-07-01 11:41:27 +00:00

ipsec_osdep.h

Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); in

2007-06-12 00:12:01 +00:00

ipsec_output.c

Replace hard coded options by their defined PFIL_{IN,OUT} names.

2007-07-19 09:57:54 +00:00

ipsec.c

Commit IPv6 support for FAST_IPSEC to the tree.

2007-07-01 11:41:27 +00:00

ipsec.h

Commit IPv6 support for FAST_IPSEC to the tree.

2007-07-01 11:41:27 +00:00

key_debug.c

Commit IPv6 support for FAST_IPSEC to the tree.

2007-07-01 11:41:27 +00:00

key_debug.h

…

key_var.h

First steps towards IPSec cleanup.

2006-03-25 13:38:52 +00:00

key.c

Commit IPv6 support for FAST_IPSEC to the tree.

2007-07-01 11:41:27 +00:00

key.h

…

keydb.h

First steps towards IPSec cleanup.

2006-03-25 13:38:52 +00:00

keysock.c

Add a missing priv check in key_attach to prevent non-su users

2007-11-12 23:47:48 +00:00

keysock.h

Fix stack corruptions on amd64.

2006-01-21 10:44:34 +00:00

xform_ah.c

Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which

2007-08-06 14:26:03 +00:00

xform_esp.c

Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which

2007-08-06 14:26:03 +00:00

xform_ipcomp.c

Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which

2007-08-06 14:26:03 +00:00

xform_ipip.c

Replace hard coded options by their defined PFIL_{IN,OUT} names.

2007-07-19 09:57:54 +00:00

xform_tcp.c

First steps towards IPSec cleanup.

2006-03-25 13:38:52 +00:00

xform.h

Fix more stack corruptions on amd64.

2006-03-30 18:57:04 +00:00